#publishes


Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Jul 25, 2026 // 12:10

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git on an unpatched self-managed GitLab 18.11.3 server. […]