GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab has patched a critical vulnerability, CVE-2026-97229, with a CVSS score of 10.0, affecting its Community and Enterprise Editions. The flaw is an integer overflow issue that could allow unauthenticated users to execute arbitrary code on the GitLab server by exploiting insufficient validation of regular expressions in CI/CD configurations. The vulnerability impacts multiple versions prior to 19.4.2, 19.3.5, and 19.2.8, and users are urged to update immediately to remediate the risk.

AI-extracted · verify before operational use