[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNyxEdb26elmFrgzsWDR68x7xUsCvoLgtiOjhl7CSTVA":3},{"article":4,"iocs":45,"watch_terms":46,"solutions":47,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"9c903b62-3645-45ba-a3c7-f969ca0ebe23","A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You","a-leaked-gitlab-issue-email-address-lets-anyone-push-code-and-run-ci-jobs-as-you-886528","The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI\u002FCD jobs that run as you. GitLab shows each user this address behind a button labeled \"Email work item to this project.\" Mail sent to it opens an issue in that project, authored","A vulnerability in GitLab's email issue feature allows attackers to gain access to a user's private email token. This token can be used to commit code, create branches, and trigger CI\u002FCD jobs as the legitimate user, bypassing 2FA and IP restrictions. The severity depends on the user's role, with Maintainer accounts posing a higher risk.","Leaked GitLab email tokens allow unauthorized code commits and CI\u002FCD job execution.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fa-leaked-gitlab-issue-email-address.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjaHKzSxkk0R4wjlziQHsR5vS1s1mTJovZkES9XL9nn5VLYiM55XuJoiGP9cugwNUOBMEMG3NrW3iBL9cVOqfp0F-9roYS7K7R5w8t3_NJr61_2_XgRNltvjXBFoGLfQPQFhUk0ju_mMCRCqJHjr76BrbngafAtElKkD-LZWZ7uUcY82i8PAMKh0ljHJQI\u002Fs1600\u002Fgitlab-email.jpg","2026-09-23T16:53:10+00:00","2026-09-23T20:00:12.699043+00:00",8,[17,20,22,24],{"name":18,"type":19},"GitLab","product",{"name":18,"type":21},"vendor",{"name":23,"type":19},"CI\u002FCD",{"name":25,"type":26},"DevOps","technology","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":27,"icon":29,"name":30,"slug":31},null,"Supply Chain","supply-chain",[33,35,40],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,23],{"controls":48,"vendors":136},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"slug":79,"name":80,"problem":81,"products":82},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":108,"name":109,"problem":110,"products":111},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":153},"gitlab-email-token-leak-enables-unauthorized-code-commits-and-ci-bypasses","GitLab Email Token Leak Enables Unauthorized Code Commits and CI Bypasses","A flaw in GitLab's email-to-issue feature exposes per-user email tokens that, once leaked, allow an attacker to impersonate the victim entirely — committing code, creating branches, and triggering CI\u002FCD pipelines without needing their password or passing 2FA. The root cause is that a sensitive authentication token was embedded in an email address that could be inadvertently exposed through forwarded emails, mailing list archives, or misconfigured mail clients. This is particularly dangerous because the token bypasses multiple layers of security controls that organizations rely on, including two-factor authentication and IP allowlisting. The risk escalates significantly for privileged accounts such as Maintainers, where an attacker could silently inject malicious code into production pipelines.",[142,143,144,145,146,147,148,149,150,151,152],"CIS Control 4: Controlled Use of Administrative Privileges","CIS Control 5: Account Management","CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 AU-6: Audit Record Review and Analysis","NIST SP 800-53 CM-6: Configuration Settings","OWASP Top 10 A07:2021 – Identification and Authentication Failures","GDPR Article 32: Security of Processing (for EU organizations handling user data in pipelines)",{}]