A maximum-severity GitLab vulnerability is being actively exploited by threat actors to access sensitive configuration files and secrets, risking software supply chain compromises.
Threat actors are actively exploiting a critical path traversal vulnerability in GitLab, allowing unauthenticated users to access arbitrary files on affected servers.