According to Bleeping Computer, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) says that attackers have begun exploiting a maximum‑severity vulnerability in GitLab that was patched earlier this month.
The agency noted that the flaw received the highest severity rating before the patch was released. CISA’s statement emphasizes that the vulnerability is now being used by threat actors in active attacks.
No additional details such as specific numbers of affected sites, timestamps beyond “earlier this month,” or direct quotes from officials are provided. The report reflects only what CISA and Bleeping Computer have reported: that the patched maximum‑severity GitLab issue is currently being exploited in the wild.
CISA advises affected organizations to apply the latest GitLab update immediately and follow standard remediation guidance for vulnerable services.
