Critical Git Lab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
GitLab released an out-of-band critical patch on August 17, 2026 for CVE-2026-19478, a GraphQL directive flaw rated CVSS 9.4 that could let an unauthenticated attacker remotely modify or delete public projects and user data on self-managed Community and...