**Source : The Hacker News | 25 juillet 2026** Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap 👉 **Lire l'article complet sur The Hacker News :** [https://thehackernews.com/2026/07/researcher-publishes-gitlab-rce-poc.html](https://thehackernews.com/2026/07/researcher-publishes-gitlab-rce-poc.html)