GitLab warns of max severity code execution vulnerability

October 14, 2026 at 10:55

Quality: 8/10 Relevance: 9/10

Summary

GitLab disclosed a max-severity remote code execution vulnerability in its CI/CD Regular Expression Compiler (CVE-2026-97229). The flaw allows unauthenticated attackers to execute code on affected GitLab servers; fixed versions are CE/EE 19.2.8, 19.3.4, and 19.4.2. The company and authorities urge immediate patching, while GitLab.com has already applied the fix.

Vulnerability & CVE Security

Read Original Article