CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

Rapid7 Version 1 original current

Imported from official source

On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. …

This version

Version
1 of 1
Recorded
October 13, 2026 12:02
Change
Initial
Content hash
2c3e07f1a52baf5a0cfe1ed8ad5197e9
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.