
- GitLab patched CVE-2026-0723, a flaw allowing 2FA bypass and account takeover
- Additional DoS vulnerabilities in authentication, API endpoints, Wiki, and SSH were also fixed
- GitLab urges immediate upgrades; ~6,000 exposed CE instances remain potential targets
GitLab fixed a high-severity vulnerability in its Community Edition and Enterprise Edition (CE/EE) versions allowed threat actors to bypass two-factor authentication and potentially take over people’s accounts.