GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014 (Swati Khandelwal/The Hacker News)

GitLab has patched a critical unauthenticated remote code execution flaw affecting self-managed servers across every release since 7.0 in 2014, creating a potentially organization-wide exposure for any business running GitLab on-premises or in private cloud. For CIOs and technology leaders, the strategic implication is urgent: a single unpatched DevSecOps platform could become a direct path to source code theft, pipeline compromise, and broader infrastructure takeover, so remediation should be treated as a high-priority operational risk.