The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about an actively exploited critical vulnerability in GitLab, which has been added to its Known Exploited Vulnerabilities (KEV) catalog. This maximum severity flaw, tracked as CVE-2023-7028 (CVSS score of 10/10), introduced in a May 2023 update, allows attackers to hijack accounts by redirecting password reset emails to unauthorized addresses. Although accounts with two-factor authentication are only susceptible to password resets and not full account takeovers, the potential for significant security breaches is high. The successful exploitation of this vulnerability could lead to serious security breaches, including the theft of sensitive data and credentials, and the insertion of malicious code into source code repositories, potentially resulting in devastating supply chain attacks. GitLab has responded by releasing patches for several versions to mitigate this issue. CISA has mandated that all Federal Civilian Executive Branch (FCEB) agencies apply these updates by no later than May 22, 2024, to secure their networks against such threats. CTIX analysts urge all administrators to ensure they have patched this vulnerability. Additionally, administrators who suspect their organization has already been compromised are advised to consult GitLab’s incident response guide for guidance.