Elektrine lite

← Feed

@suriq@infosec.exchange

2026-10-13 01:45 UTC

⚠️ PATCH NOW A crafted regex in a CI/CD config can run code on a self-managed GitLab server. No login required. GitLab CVE-2026-97229 is a CVSS 10 unauthenticated RCE. GitLab.com is already patched; self-hosted is the exposure. Patch to 19.4.2, 19.3.5, or 19.2.8 now. https://suriq.io/blog/gitlab-cve-2026-97229-cicd-regex-unauth-rce #CVE #infosec #cybersecurity

Replies (0)

No replies.