CVE-2024-9164: GitLab Users Urged to Update Now

GitLab, a premier platform for DevOps and continuous integration/continuous delivery has rolled out essential security updates in versions 17.4.2, 17.3.5 and 17.2.9 for both community Edition (CE) and enterprises edition (EE). These updates tackles several important vulnerabilities, notably a critical severity flaw (CVE: 2024-9164) that could enable attackers to execute pipelines on arbitrary branches, posing a significant security threat to impacted instances.

The critical vulnerability identified as CVE:2024-9164 impacts all versions of GitLab Enterprise Edition from 12.5 onward. This flaw enables malicious actors to execute pipeline across any branch, posing a significant risk of unauthenticated access to sensitive data and system. With a CVSS score of 9.6, this issue is recognized as highly severe.

• Alert

Barracuda ESG flaws exploited, gaining root access

By infosecbulletin / Wednesday , November 11 2026

Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two...

Read More

• Alert

Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems

By infosecbulletin / Tuesday , November 10 2026

Apple, SAP, and Ivanti have published security updates that fix several flaws with messaging, Bluetooth, enterprise servers, and endpoint management...

Read More

• Hot Topic

Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom

By infosecbulletin / Tuesday , November 10 2026

A jailbroken AI has been attacking a European telecom company and 13 companies using its data center and cloud for...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 10.11. 2026

By infosecbulletin / Tuesday , November 10 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

IBM fixes 208 API Connect vulnerabilities, 47 critical

By infosecbulletin / Tuesday , November 10 2026

IBM patched 208 security flaws in its API Connect platform. The CVE records released out on November 7, 2026. Among...

Read More

• Ransomware

89 New ransomware groups emerge in 2026, claiming over 2,200 victims

By infosecbulletin / Sunday , November 8 2026

New ransomware actions in 2026 show more variety in cybercrime, with some groups claimed over 100 victims. The ransomware attack...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 08.11. 2026

By infosecbulletin / Sunday , November 8 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction

By infosecbulletin / Saturday , November 7 2026

A major system failure has brought customer-facing banking services to a standstill at 128 shinkin banks across western Japan, leaving...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 06.11. 2026

By infosecbulletin / Friday , November 6 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Cyber Attack
• Hot Topic

Cyber attack causes French bank Credit Mutuel Arkea €100 million missing

By infosecbulletin / Friday , November 6 2026

French lender Credit Mutuel Arkea said on Thursday hackers had stolen around €100 million ($112.61 million) in a cyber heist...

Read More

Other significant vulnerabilities addressed in this update include:

CVE-2024-8970: Let attackers pretend to be other users in certain situations, which could result in unauthorized actions and data leaks.

CVE-2024-8977: A security flaw that allows attacker to access internal resources and services through the Analytins Dashboard.

CVE-2024-9631: Checking code changes in merge requests with conflicts can be slow, causing a denial of services (DoS) condition.

CVE-2024-6530: A vulnerability that lets attackers run harmful scripts and steal user information.

GitLab has fixed vulnerabilities in versions 17.4.2, 17.3.5 and 17.2.9 for both Community and Enterprise Editions. Users should upgrade to one of these versions right away.

Related topics

Lumma C2 malware attack Bangladeshi several websites

Bangladeshi 32.4% government websites face cyber attack: NAS report