GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

Summary

A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.