Critical GitLab Vulnerability Allows Unauthenticated Attackers to Execute Remote Code

GitLab released emergency updates (19.4.2, 19.3.5, 19.2.8) to address a critical integer-overflow vulnerability (CVE-2026-97229) in its CI/CD regex compiler that could allow unauthenticated remote code execution (CVSS 10.0). The advisory urges immediate upgrades for self-managed instances, lists additional high-severity fixes (XSS, pipeline authorization bypasses, response cache poisoning, AI agent manipulation), indicates GitLab.com is already patched, and reports no confirmed active exploitation or public PoC at release time.