Critical GitLab Flaw Lets Unauthenticated Attackers Execute Remote Code on Servers
ID: 31d0d548-ec1b-55bc-be52-dae2af2e3c1c
STIX ID: report--31d0d548-ec1b-55bc-be52-dae2af2e3c1c
Feed Name: Cyber Press
Threat Score
GitLab released CE/EE updates (19.4.2, 19.3.5, 19.2.8) addressing 24 vulnerabilities—most notably CVE-2026-97229, a CVSS 10.0 unauthenticated remote code execution via an integer overflow in the CI/CD regex compiler—and urges immediate upgrades for affected self-managed installations; GitLab.com is patched and no active exploitation is reported.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.