CERT24Exposed GitLab project email addresses let attackers push code — 24.09.2026Loading data…
CERT24Threat Observatory
Period

Exposed GitLab project email addresses let attackers push code — 24.09.2026

Private GitLab project email addresses can be exposed in public READMEs, contributing guides, and support pages, allowing unauthorized parties to create issues or merge requests in projects. The impact depends on the permissions of the associated user account and may include code changes, CI/CD runs, access to private repositories, and secrets.

← Back to intelligence

Exposed GitLab project email addresses let attackers push code — 24.09.2026

Private GitLab project email addresses can be exposed in public READMEs, contributing guides, and support pages, allowing unauthorized parties to create issues or merge requests in projects. The impact depends on the permissions of the associated user account and may include code changes, CI/CD runs, access to private repositories, and secrets.