CISA warns hackers exploiting max-severity GitLab flaw in active attacks

CISA has added a maximum-severity GitLab vulnerability to its Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. The flaw, likely an account-takeover or remote-code-execution issue, poses a direct threat to organizations using GitLab for source-code management. Immediate patching is advised, but the full scope of affected deployments remains unclear.