Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-10053
By Yogev Levi |
23 August 2026
GitLab package registry path traversal allows authenticated RCE under specific conditions
GitLab CE/EE package registry contains a path traversal flaw that, under certain conditions, lets an authenticated user (PR:L) achieve remote code execution over the network. Affected versions: 18.8 before 19.0.6, 19.1 before 19.1.4, 19.2 before 19.2.2. Upgrade to 19.0.6/19.1.4/19.2.2 or later.