Warning: Critical vulnerability in GitLab CE/EE, Patch Immediately!

GitLab Community Edition (CE) and Enterprise Edition (EE) versions 19.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2

CVE-2026-97229 CWE-190: Integer Overflow.

CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

A critical severity vulnerability affects GitLab CE/EE. An unauthenticated remote attacker could exploit an integer overflow in the CI/CD regular expression compiler to execute arbitrary code on the server.

GitLab servers securely hold source code, CI/CD secrets, and deployment keys. Organizations rely on it for their software supply chain, so a full server takeover puts any internet facing instance at immense risk.

If exploited this could lead to data breaches, system compromise, and operational downtime impacting confidentiality, integrity, and availability of critical businesses.

A critical security vulnerability, CVE-2026-97229, has been identified in GitLab CE/EE.

CVE-2026-97229 allows unauthenticated remote attackers to achieve arbitrary code execution via a specially crafted regular expression in a CI/CD configuration. The bug sits in the CI/CD regular expression compiler where weak validation of regular expressions leads to an integer overflow. This vulnerability requires no login to exploit.

To remediate this critical threat, immediately upgrade GitLab CE/EE to version 19.4.2, 19.3.4, or 19.2.8.

The Centre for Cybersecurity Belgium strongly recommends installing updates for vulnerable devices with the highest priority after thorough testing.

The CCB recommends organizations upscale monitoring and detection capabilities to identify any related suspicious activity and ensure a swift response in case of an intrusion.

In case of an intrusion, you can report an incident via .

While patching appliances or software to the newest version may protect against future exploitation, it does not remediate historic compromise.