Max-severity GitLab bug allows remote code execution over 12 years of releases

GitLab has patched a critical remote code execution vulnerability affecting self-managed GitLab CE/EE instances, with exposure reaching back 12 years of releases, making this a high-risk issue for organizations that use GitLab as a core DevSecOps platform. For CIOs and technology leaders, the business impact is potentially severe because a compromise could expose source code, CI/CD secrets, access tokens, and production pathways, enabling supply-chain attacks, persistence, and lateral movement across the enterprise. IT teams should treat this as an urgent patch-and-verify event, especially because exploitation scans are likely to ramp up quickly across the internet.