identity-authentication-vulnerabilitywidely-deployed-product-advisoryinternet-facing-service-vulnerabilityinternet-exposed-service

GitLab Patches High-Severity 2FA Bypass and DoS Vulnerabilities in CE/EE

Vulnerability Disclosure · 5 sources · Updated 4mo ago · First seen Jan 21, 2026

GitLab released security updates for self-managed GitLab Community Edition (CE) and Enterprise Edition (EE) to fix a high-severity two-factor authentication (2FA) bypass and multiple denial-of-service (DoS) flaws. The most significant issue, CVE-2026-0723 (CVSS 7.4), is an unchecked return value weakness in authentication services that could allow an attacker with knowledge of a victim’s credential/account ID to bypass 2FA by submitting forged device responses.

GitLab also patched DoS vulnerabilities affecting unauthenticated and authenticated scenarios, including crafted malformed authentication data against the Jira Connect integration (CVE-2025-13927), incorrect authorization validation in API endpoints such as the Releases API (CVE-2025-13928), malformed Wiki documents that bypass cycle detection (CVE-2025-13335), and repeated malformed SSH authentication requests (CVE-2026-1102). Fixed releases are 18.8.2, 18.7.2, and 18.6.4; GitLab advised administrators to upgrade immediately, noting GitLab.com is already patched, while third-party tracking indicated thousands of exposed GitLab CE instances remain online and potentially at risk if unpatched.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

2 events · Jan 21, 2026

Jan 21, 20269mo ago
GitLab urges self-managed admins to upgrade immediately
In its advisory, GitLab warned self-managed customers to apply the new releases quickly because unpatched instances could face service disruption or account compromise. GitLab also stated that GitLab.com was already running patched code and that GitLab Dedicated customers did not need to take action.
Jan 21, 20269mo ago
GitLab releases patches for 2FA bypass and DoS vulnerabilities
GitLab issued security updates 18.8.2, 18.7.2, and 18.6.4 for self-managed Community Edition and Enterprise Edition instances to fix multiple vulnerabilities. The patched issues include CVE-2026-0723, a high-severity two-factor authentication bypass flaw, along with four denial-of-service vulnerabilities affecting Jira Connect, the Releases API, Wiki redirects, and SSH authentication handling.

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

1 linked

Two-factor authentication bypass in GitLab CE/EE (CVE-2026-0723)

Affected products

3 linked

GitlabGitlab Community EditionGitlab Enterprise Edition

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

5 references tracked. Mallory keeps watching after this page renders.

Thecyberexpress Com VulnerabilitiesNews · Jan 23, 2026

GitLab Patch Release Fixes High-Severity VulnerabilitiesOpen source ↗

ScworldNews · Jan 22, 2026

GitLab patches critical 2FA bypass vulnerability | SC MediaOpen source ↗

Cyber Security NewsNews · Jan 21, 2026

Multiple GitLab Vulnerabilities Enables 2FA Bypass and DoS AttacksOpen source ↗

Bleeping ComputerNews · Jan 21, 2026

GitLab warns of high-severity 2FA bypass, denial-of-service flawsOpen source ↗

Security Online InfoNews · Jan 21, 2026

GitLab Alert: High-Severity 2FA Bypass & DoS Flaws Patched in Urgent UpdateOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

GitLab Patches High-Severity 2FA Bypass and DoS Vulnerabilities in CE/EE

How this story unfolded

GitLab urges self-managed admins to upgrade immediately

GitLab releases patches for 2FA bypass and DoS vulnerabilities

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

GitLab patches five vulnerabilities including 2FA bypass and DoS flaws

GitLab patches high-severity XSS and authorization bypass flaws in CE/EE

GitLab patches token theft, DoS, XSS, SSRF, and auth bypass flaws

GitLab Patches High-Severity 2FA Bypass and DoS Vulnerabilities in CE/EE

How this story unfolded

GitLab urges self-managed admins to upgrade immediately

GitLab releases patches for 2FA bypass and DoS vulnerabilities

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

GitLab patches five vulnerabilities including 2FA bypass and DoS flaws

GitLab patches high-severity XSS and authorization bypass flaws in CE/EE

GitLab patches token theft, DoS, XSS, SSRF, and auth bypass flaws