The bug (CVE-2024-6385) is similar — but not identical — to a critical flaw GitLab patched just two weeks ago.