Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

Over 1,000 internet-exposed GitLab servers remain unpatched against a maximum-severity remote code execution vulnerability. The flaw is being actively exploited in ongoing attacks. Despite patches being available, a significant number of GitLab instances remain vulnerable. The vulnerability carries the highest possible severity rating, indicating critical risk. Organizations running GitLab are urged to apply patches immediately to prevent compromise. The exposure of these servers to the internet increases the attack surface significantly. Active exploitation suggests threat actors are already leveraging the flaw at scale.