A critical denial of service vulnerability in GitLab CE/EE allows unauthenticated remote attackers to disrupt system availability by sending malicious payloads to the container registry.

This vulnerability is caused by improper validation of input quantity (CWE-1284) within the container registry event endpoint. An unauthenticated attacker can exploit this condition to cause a denial of service on the host system.

The ability for an unauthenticated attacker to remotely crash or hang the GitLab service poses a significant risk to development workflows and continuous integration pipelines. With a CVSS score of 7.5, this high-severity flaw directly threatens operational continuity, potentially leading to widespread downtime for software delivery teams and loss of productivity.

Immediate Action: Upgrade GitLab CE/EE installations to versions 18.7.5, 18.8.5, 18.9.1, or later, as provided in the vendor security release.

Proactive Monitoring: Monitor system logs and container registry event metrics for unusual traffic patterns or spikes in resource consumption that may indicate exploitation attempts.

Compensating Controls: Implement rate limiting and WAF rules to filter traffic directed at the container registry event endpoint, which may help mitigate the impact of malicious requests.

Public Exploit Available: Yes — a published proof-of-concept exists, attributed to the security report at https://hackerone.com/reports/3452200.

Given the ease of exploitation and the potential for service disruption, this vulnerability should be treated with high priority. Organizations must verify their current GitLab version and apply the recommended security updates immediately to protect against potential denial of service attacks targeting their infrastructure.