AI Summary

Security researchers at depthfirst released working exploit code on July 24 for a GitLab vulnerability that had been patched on June 10. The flaw allows any authenticated user who can push to a project to run arbitrary commands as the git user on a self‑managed GitLab server running version 18.11.3 that has not applied the update. The proof‑of‑concept demonstrates remote code execution by executing commands as git. The exploit targets only self‑managed installations that remain on the vulnerable version.

AI summaries can be wrong sometimes—always verify important details using the source article.