Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

Monday, August 17, 2026 at 09:03 PM UTC·Source: The Hacker News

Updated: Monday, August 17, 2026 at 10:00 PM UTC

Executive Summary

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4. Released on

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-19478

NVD MITRE CVE

Source Attribution

Originally published by The Hacker News on Aug 17, 2026.

Related Threats

MEDIUMVulnerability

FDA Weighing Possible Regs for GenAI Medical Devices

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/fda-weighing-possible-regs-for-generative-ai-medical-devices-image_small-6-a-32593.jpg" align=right hspace=4>Agency Seeks Public Input on Risk-Based Oversight Approach Across Product Life Cycle The U.S. Food and Drug Administration is seeking public feedback on the varying risks and other considerations involving generat

1h agoBank Info Security

MEDIUMVulnerability

When AI Risk Becomes a Board Liability

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/when-ai-risk-becomes-board-liability-image_small-9-a-32594.jpg" align=right hspace=4>CIOs Can Strengthen Oversight Through Reporting, Records and Insurance Reviews AI failures can trigger financial, regulatory and reputational exposure that reaches the boardroom. Reed Smith partners Carolyn Rosenberg and Andy Moss explai

1h agoBank Info Security

CRITICALVulnerability

Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.

CVE-2026-19478

1h agoDark Reading