CVE-2026-97229: Critical GitLab RCE
ID: a71174a3-c22d-565c-8db0-274e5da6c696
STIX ID: report--a71174a3-c22d-565c-8db0-274e5da6c696
Feed Name: SOCRadar Blog
GitLab released an urgent patch for CVE-2026-97229, a critical (CVSS 10.0) integer overflow in its CI/CD Regular Expression Compiler that can allow unauthenticated arbitrary code execution on self‑managed GitLab servers; administrators should upgrade affected versions (19.2 before 19.2.8 → 19.2.8; 19.3 before 19.3.5 → 19.3.5; 19.4 before 19.4.2 → 19.4.2), restrict public exposure until patched, and monitor for suspicious activity — no confirmed in‑the‑wild exploitation reported as of 2026-10-13.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
