A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

The Hacker News - Sep 23, 2026

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. GitLab shows each user this address behind a button labeled "Email work item to this project." Mail sent to it opens an issue in that project, authored

Read full article

More News

Kick Connect
About Us

Kick Connect publishes a comprehensive overview of the latest news and theories on science & technology. We also report accurate news with a unique perspective on the world around us.