Critical GitLab flaw allows unauthenticated code execution on servers

GitLab fixed critical vulnerability CVE-2026-110264 that could, under certain conditions, allow an unauthenticated user to execute arbitrary code on a self-managed server. The flaw affects GitLab versions back to version 7.0. The source reports no evidence that the flaw has been used in attacks.