x.comthreadNagli (@galnagli) on X
Tweet by Gal Nagli (galnagli) saying a Gemini model turned the GitLab advisory for CVE-2026-110264 into a working heap exploit in 17 minutes, with the full chain done in about another hour. The flaw is a CVSS 10.0 unauthenticated RCE on self-managed GitLab servers, affecting 12 years of releases, found by joaxcar. The post links a The Hacker News article and gives no technical details of the exploit.
TL;DR Researcher says an AI model built a working heap exploit for the CVSS 10 GitLab RCE CVE-2026-110264 from the advisory in 17 minutes.
Organisations named here
- Gal Nagli
- joaxcar
CVEs named here
- CVE-2026-110264
Technologies named here
- Gemini 4 Argon
- GitLab self-managed servers
- GitLab
- Gemini
- CVSS
Techniques named here
- Unauthenticated remote code execution in GitLab
- Heap exploitation
Related in Offensive Security
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
github.comrepoYesWeHack Claude Kit
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
huntress.comwriteup