GitLab RCE Flaws Allow Attackers to Execute Commands via Malicious Jupyter Notebooks
Mon Jul 27 2026
Data Science
Development
Vulnerability
gbhackers.com
A critical remote code execution (RCE) vulnerability chain in GitLab’s Jupyter Notebook diff renderer. This issue is rooted in two long-standing memory safety vulnerabilities within the Oj Ruby JSON parser. The vulnerabilities impact both GitLab Community Edition and Enterprise Edition releases from version 15.2.0 through 19.0.1. They allow an authenticated project member to execute commands […]
The post GitLab RCE Flaws Allow Attackers to Execute Commands via Malicious Jupyter Notebooks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.