Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

GitLab CI/CD Regular Expression Compiler integer overflow RCE (CVE-2026-97229)

Vulnerability
First reported
Last updated
Happening score
H score 28
1 unique sources, 1 articles

Summary

Hide ▲

GitLab CI/CD Regular Expression Compiler flaw CVE-2026-97229 is now patched, and unpatched GitLab CE/EE servers face unauthenticated remote code execution risk. The maximum-severity bug is an integer overflow in regular expression parsing and compilation for pipeline configuration files. GitLab says self-managed users on 19.2 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2 should upgrade immediately.

Related Happenings

GitLab AI Gateway improper neutralization command execution security flaw (CVE-2026-90970)

Vulnerability
H score35 First: 02.10.2026 19:20 Last: 02.10.2026 19:20 Sources 1

About this happening: GitLab has fixed CVE-2026-90970, a critical improper neutralization flaw in GitLab AI Gateway that could let authenticated users with Duo Agent Platform access...

Open Happening

GitLab Self-Hosted AI Gateway immediate update advisory (CVE-2026-90970)

Advisory/Mitigation
H score41 First: 02.10.2026 19:20 Last: 02.10.2026 19:20 Sources 1

About this happening: GitLab issued immediate update guidance for GitLab Self-Managed customers running Self-Hosted AI Gateway after fixing CVE-2026-90970, a flaw that could allow arb...

Open Happening

GitLab CE/EE repository commits API path traversal (CVE-2026-85706)

Vulnerability
H score43 First: 14.09.2026 10:06 Last: 14.09.2026 10:06 Sources 1

About this happening: CISA added CVE-2026-85706 to its actively exploited catalog after GitLab CE/EE servers were probed and attacked, increasing the risk of credential and secret disclosure*...

Open Happening

GitLab self-managed installations immediate upgrade advisory

Advisory/Mitigation
H score45 First: 11.09.2026 14:15 Last: 11.09.2026 14:15 Sources 1

About this happening: GitLab issued immediate upgrade guidance for self-managed GitLab installations after fixing two security issues in GitLab CE and GitLab EE. Operators were told...

Open Happening

GitLab notebook diff authenticated RCE flaw

Vulnerability
H score37 First: 25.07.2026 11:34 Last: 25.07.2026 11:34 Sources 1

About this happening: A public PoC exploit now shows an authenticated RCE path in GitLab that can run commands as git on vulnerable self-managed servers. The flaw affects GitLab CE/EE...

Open Happening

Timeline

  1. 12.10.2026 16:09 2 articles · 2h ago

    GitLab warns of CVE-2026-97229 in the CI/CD Regular Expression Compiler

    Initial Disclosure

    GitLab warned that CVE-2026-97229, a maximum-severity integer overflow in the CI/CD Regular Expression Compiler, could let unauthenticated remote attackers execute arbitrary code on targeted GitLab servers through a specially crafted regular expression in CI/CD configuration files. GitLab said it remediated the issue in Community Edition (CE) and Enterprise Edition (EE) releases 19.2.8, 19.3.4, and 19.4.2, that GitLab.com is already on the patched version, and that GitLab Dedicated customers do not need to take action.

    Show sources
    Open in new tab