Devops iconDevopsSep 25, 2026

Leaked GitLab Email Tokens Can Reach Code, Secrets and CI/CD Pipelines

Aikido Security researcher Joe Leon detailed the attack path this week in a blog post after reporting it to GitLab earlier this year.

Leaked GitLab Email Tokens Can Reach Code, Secrets and CI/CD Pipelines

Share this story

Send the public story page.

Useful takeaways from this story.

Aikido Security researcher Joe Leon detailed the attack path this week in a blog post after reporting it to GitLab earlier this year.

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

Aikido Security researcher Joe Leon detailed the attack path this week in a blog post after reporting it to GitLab earlier this year.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app