Despite immediately applying the patch to address a critical security vulnerability (CVE-2026-110264) for gitlab.lrz.de, our subsequent investigation revealed attempts to exploit the vulnerability and isolated instances of unauthorized access to the instance.
As a result, we will restore gitlab.lrz.de to a reliably uncompromised state (October 18th 00:10) next week and renew all secrets. Although no data exfiltration or extensive manipulation has been proven to date, we are compelled to take this precautionary security measure.
Content created since then (issues, wiki entries, etc.) may be lost in the process. Please back up this content so that you can repost it next week. Until it is reset, the instance will operate in read-only mode.
Further information will be provided gradually on status.lrz.de.