Tech article
GitLab warns of max severity code execution vulnerability - BleepingComputer
Publisher description: GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances.
NewsAPI | Oct 12, 2026 | Sergiu Gatlan
Automated excerpt
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. CVE-2026-97229 stems from an integer overflow weakness in GitLab's CI/CD Regular Expression Compiler, which parses, compiles, and evaluates regular expressions in projects' pipeline configuration files. GitLab fixed the security issue in GitLab Community Edition (CE) and Enterprise Edition (EE) versions from 19. 2 before 19. 2. 8, 19. 3 before 19. 3. 4, and 19. 4 before 19. 4. 2, and urged users to patch their servers immediately.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.