Patch GitLab now: a GraphQL flaw lets anyone delete public repos
Unauthenticated, CVSS 9.4, still open on self-hosted installs. Also: an AI agent exploited Snowflake's CI, and GitHub disputes who wrote the bug.
Copy markdown
Unauthenticated, CVSS 9.4, and remotely destructive
CVE-2026-19478 lets an unauthenticated attacker remotely modify or delete public projects and user data through a GraphQL directive — no login, no user interaction. It hits every self-hosted GitLab CE/EE from 18.2 through 19.2.3; GitLab.com is already patched, your instance almost certainly isn't.
Upgrade to 19.2.4 before someone writes the exploit
Fixed builds are 19.2.4, 19.1.6, 19.0.8, and 18.11.11 — GitLab says upgrade 'as soon as possible.' The same release also closes CVE-2026-19650 (CVSS 7.1), a GraphQL CSRF that runs unauthenticated mutations via GET requests. No public exploit existed as of Aug 18 — that's exactly the window you want to patch in.
An AI agent walked into Snowflake's CI and left with a Jira token
Wiz's autonomous Red Agent found a shell-injection flaw in a Snowflake GitHub Actions workflow — an untrusted issue title piped straight into a run: command — then exploited it to exfiltrate a Jira token with read access to Snowflake's engineering and bug-bounty projects. Grep your own workflows for github.event.* values interpolated into shell steps tonight.
Update: GitHub says Copilot didn't write the bug
The viral 'Copilot Autofix wrote the vulnerability' framing is now contested: GitHub's review found a human authored the vulnerable line and the Copilot co-author tag came from a squashed-commit trailer. Wiz softened its claim to 'unclear whether the code-change was AI-assisted' — but the injection pattern, and the agent that found it, are real either way.