The Cyber Security Hub™ on X: "GitLab Patches CVSS 10.0 Flaw That Could Let ...

X • October 13, 2026

The Cyber Security Hub™ @TheCyberSecHub GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code thehackernews.com/2026/10/gitlab-patches-cvss-100-flaw-that-could.html 9:11 AM · Oct 13, 2026 · 607 Views

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially crafted regular expressions in pipeline configurations. The vulnerability carries a CVSS score of 10.0 and affects all versions from 19.2 prior to 19.2.8, 19.3 prior to 19.3.4, and 19.4 prior to 19.4.2. GitLab has confirmed that GitLab.com is already patched, while self-managed installations must upgrade immediately. The flaw was reported by a researcher known as 'joaxcar' through GitLab's HackerOne bug bounty program. This incident highlights a growing trend of critical vulnerabilities in GitLab's software, with multiple serious flaws disclosed in 2026. 45 sources 80

Extracted Entities

Platforms (1)

Gitlab

The Cyber Security Hub™ on X: "GitLab Patches CVSS 10.​0 Flaw That Could Let ...

The full story

Extracted Entities

Platforms (1)

The Cyber Security Hub™ on X: "GitLab Patches CVSS 10.0 Flaw That Could Let ...