The vulnerability carries a CVSS score of 10.0, the highest possible severity rating, indicating it can be exploited remotely with no authentication and requires no user interaction. Details on the specific weakness and affected versions are limited in the source report, but the critical takeaway is that exploitation is confirmed and ongoing.

Administrators running GitLab should treat this as urgent. Recommended actions include:

• Apply the latest security patches from GitLab immediately
• Check whether your instance is exposed to the internet and restrict access where possible
• Review logs for signs of exploitation and unusual activity
• Monitor CISA's Known Exploited Vulnerabilities catalog for updates

Given that CISA has flagged this as actively exploited, organizations with internet-facing GitLab deployments should prioritize patching over standard change-control timelines.

Source: BleepingComputer

Is your organization running GitLab, and have you already patched or restricted access in response to this advisory?