2026-10-13 01:45 UTC
⚠️ PATCH NOW
A crafted regex in a CI/CD config can run code on a self-managed GitLab server. No login required.
GitLab CVE-2026-97229 is a CVSS 10 unauthenticated RCE. GitLab.com is already patched; self-hosted is the exposure.
Patch to 19.4.2, 19.3.5, or 19.2.8 now.
https://suriq.io/blog/gitlab-cve-2026-97229-cicd-regex-unauth-rce
#CVE #infosec #cybersecurity
Replies (0)
No replies.