I put this remediation guide together in case it's helpful for people. https://casco.com/blog/cve-2026-110264-gitlab-remediation