logo

CVE-2026-97229: Critical GitLab RCE

ID: a71174a3-c22d-565c-8db0-274e5da6c696

STIX ID: report--a71174a3-c22d-565c-8db0-274e5da6c696

Feed Name: SOCRadar Blog

Threat Score
80/100

Date Published: 2026-10-13

Date Updated: 2026-10-13

Author: Ameer Owda

...
...

GitLab released an urgent patch for CVE-2026-97229, a critical (CVSS 10.0) integer overflow in its CI/CD Regular Expression Compiler that can allow unauthenticated arbitrary code execution on self‑managed GitLab servers; administrators should upgrade affected versions (19.2 before 19.2.8 → 19.2.8; 19.3 before 19.3.5 → 19.3.5; 19.4 before 19.4.2 → 19.4.2), restrict public exposure until patched, and monitor for suspicious activity — no confirmed in‑the‑wild exploitation reported as of 2026-10-13.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.