---
title: "Maximum-severity GitLab flaw allowing account hijacking under active exploitation"
url: https://daily.dev/posts/maximum-severity-gitlab-flaw-allowing-account-hijacking-under-active-exploitation-85qohsvyk
source_url: https://arstechnica.com/?p=2021409
type: article
source: "Ars Technica"
published: 2024-05-02T19:54:27.811Z
updated: 2024-05-09T07:55:57.971Z
tags: ["cyber", "vulnerability", "gitlab"]
reading_time: 6
upvotes: 1
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Maximum-severity GitLab flaw allowing account hijacking under active exploitation

**[Ars Technica](https://daily.dev/sources/arstechnica)** · 6 min read · 1 upvotes · 0 comments

## Summary

A maximum severity GitLab flaw allows hackers to hijack accounts, with active exploitation reported. Users should patch the vulnerability and enable multi-factor authentication.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://arstechnica.com/?p=2021409>

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments

---

Tags: [#cyber](https://daily.dev/tags/cyber), [#vulnerability](https://daily.dev/tags/vulnerability), [#gitlab](https://daily.dev/tags/gitlab)

[View this post on daily.dev](https://daily.dev/posts/maximum-severity-gitlab-flaw-allowing-account-hijacking-under-active-exploitation-85qohsvyk)