# Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

> **Open Intelligence Dossier** · First detected: 2026-10-22 03:40 UTC · Category: Technology

## Executive Summary
10 news sources are covering this Technology story right now — PULSE is tracking how fast it spreads.

## Intelligence Brief
"Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases" is generating significant coverage in the Technology category, with 10 articles from 10 distinct sources tracked by PULSE so far.


Outlets currently covering the story include OrcaRouter, GBHackers News, Pasquale Pillitteri and GIGAZINE. PULSE measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


This brief was generated by PULSE's extractive engine from coverage metadata only. The latest headlines from every source are listed below; the velocity chart shows how the story is developing in real time.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| OrcaRouter | GitLab AI Gateway CVE-2026-90970: a 9.9 sandbox escape | [Source Link](https://news.google.com/rss/articles/CBMidkFVX3lxTE9zNm5wb1NVdi1OdUUwSVBYZVZYZ0h1S0pWZHhzd0pyUldJZFNQc1lUUnJjczMxMUpaamJkTmdUangybXdBYTdNdFM0SmtvemdEWWZmUXA2T2Y0UDhzVXZSck1EckwyYW9iZ0xGZ3JRS0xZTnNCY1E?oc=5) |
| GBHackers News | GitLab Patches Critical 10.0 RCE Vulnerability Allowing Unauthenticated Remote Code Execution | [Source Link](https://news.google.com/rss/articles/CBMieEFVX3lxTFBhNFptTjU4YWd4M19weElYYzRqOGl4Yzg5Wl9kYWx2OUhSZkxUd2JNSnAzdVdXakRHcWM4a1RDYU9ERWpXYWZGa3Zfa0JpYkpQYjhocDcwUVc2SXh1RXBlb3ZucUQ5VzVhSHVYN1h3VWlNbVc1MUxIddIBfkFVX3lxTFBBQzNSYkI0R2FkYmJ6Rk1VbEVGSzViVlNFYjZuODNZeVZXeWVUSWRPYWNXUG5lOElWZkJkMzBTbG1vbXpZcWNhLW9oVnc3RFI4Mk9RTnB1MWZYblotRC1zTGFmR2c3bk1RVzIwYUpBaERjN05CcUlscDNSRnNsQQ?oc=5) |
| Pasquale Pillitteri | GitLab CVE-2026-110264 vulnerability, CVSS 10 in 12 years of releases | [Source Link](https://news.google.com/rss/articles/CBMikgFBVV95cUxPbUFtS01SUUVTRlVhdnlJUWR1U2xjeG83UDBpRmI0bG84REpUZGJSRW1yLTNGQ1BkSGxmOERWUkdTUkF3bDQ5SU1uY2F2MnNJNXY4ZHlBWndaMk9MMzBvVzllVzVzNHliSTZxdC1RNXZhV0NJRXl5d2JRSVBhcGJCR2ltRE1acHZaUnc2R3dpMTZvQQ?oc=5) |
| GIGAZINE | GitLab has released security patches for 12 vulnerabilities, including one of the most critical vulnerabilities that could allow arbitrary code execution. | [Source Link](https://news.google.com/rss/articles/CBMickFVX3lxTE9NVXRzbnNDWDdvS253RWxaU0Y4WVFmV3Y2ajlaai1KUE9MaW1ERzVKaVBNOWJsYlFkUXdacDlmYUpCT2lIQ3NlMmhjM1VUaWx0elFpcXBqTXEwNG5mN1FBYkNqQnB6V1NudGpEUVpPNmh6QQ?oc=5) |
| BigGo Finance | GitLab Releases Emergency Patch for Unauthenticated RCE Flaw With Perfect CVSS Score, Affecting 12 Years of Versions | [Source Link](https://news.google.com/rss/articles/CBMidkFVX3lxTFBtRmtWa2ZpZ2FFdHFLVHBRaXpud2hRU2dKRVpEQ0ZPYTlrcmlJNzJzNkF6UVZHaDRHVVpwVlJ3NXZ5UTVtTVNLOF9aMENwN0UxX0VkM0JqcGNDRXg3REFobUJCSVJNMVl5ZkZQdE5pNWN4TzFvU0E?oc=5) |
| news.lavx.hu | GitLab fixes critical unauthenticated RCE spanning 12 years of releases | [Source Link](https://news.google.com/rss/articles/CBMiogFBVV95cUxNd3E0TGtBT3RBWDNQVW96c0d1Szh4TlZOZUpyV2tQY2kzdV85cXg3MlBhYjhLWmJ0SlZjb3ZlUUhvRnE4VjJHaWNabVhxQV9KUXF1ZFRZUjJwWFNOaGIyMXZwWnBaZzNpQVdhQUNHYzlaX2NxeHVVb2ZKazBBdHFsY25yNlpBbG5QQUVFS1didUhuc1VlUFh3N2NmeFFTOEp5VHc?oc=5) |
| Startup Fortune | GitLab patches a maximum-severity flaw letting hackers run code without logging in | [Source Link](https://news.google.com/rss/articles/CBMirwFBVV95cUxQS21qQ2VITTFZT1NjUVV5UnJZRll1MEdaWTlncXR0Rk53MU5DWFEtMHJISEloV21SOEVFRmRFMHB1UWh0RVZYMXNsTG9MclFqTDJNWEFJY180QXNwOEI0SjVOUkhKZWxCQm5JNzhQbWlrLWdraUVYb3FCTW1KNVN1YzVNalFSNTBTc0UwQ3hjZnREZDlmemowNXV2OHFpX0NZQllhNUFtM3dLbkRjRS00?oc=5) |
| SecNews.gr | CVE-2026-110264: GitLab fixes critical vulnerability | [Source Link](https://news.google.com/rss/articles/CBMibEFVX3lxTE1hN1dwb1F1ZGY3a1R4YnhVdlhXUFFKbHlEcktEVi1EVTdway1LWkFLWWJOLVp1ajZOYWFSaThPUzY2VE1kQUp0MGZBYTFZTG56YVl0TUF5c0VVTGhsVU16X2k0MlR6OWM0eDB1RQ?oc=5) |
| CyberSecurityNews | 12-Year-Old GitLab Vulnerability Allows Remote Code Execution on Self-Managed Server | [Source Link](https://news.google.com/rss/articles/CBMicEFVX3lxTE85bGtmZFpmT00wOGN3ekZ1aHcwaXQ3LUJSUkd1d0pBSEJITEdLX0Y2ZWhTa21BcnhkVDlpYVUwWHZ5SXRkMGxQYlBpMUpUd0Q3ME45VlJyM25KeThvandCdWVMUDZVMU5tRzFfOVFweEzSAXZBVV95cUxPU1d4WktnYTMxeUFlSGFucDlQVGg2WE5JbmQ2T2I4M3I2MmV1T1FjNWFsSFFGN2dTakZSTDF4c0pZVF90OEJMVlJOcjNfZnJCS0dHNU5hX0UzSjU0czFNckF6WnJxTkw3OVBPUUYzczU1YzhKUnpR?oc=5) |
| The Hacker News | Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTFBUYWp2NjhKVmlxcU5uWFhHTU5veEhRVVhCNlFGc1YyT2doY05aVU5ERExoZVRYTUNFYVpscDNHRFFFOTFaQzNzTTk2MkVqN1VmQmZaY2RQbzM4SF85RHZaOTNsRDB2aXhmbnRadUUteE96Vlp4V21wZl8tb0J1NzA?oc=5) |

---
*Canonical Source: https://pulse.byoaiapps.com/trend/2026-10-22/critical-gitlab-flaw-cvss-10-0-could-allow-unauthenticated-rce-across-12-years*