Skip to content
GitLab Issues Critical Patch for RCE Vulnerability CVE-2026-97229

GitLab Issues Critical Patch for RCE Vulnerability CVE-2026-97229

First seen 12 Oct 2026, 15:34 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 15:35 UTC
  • •CVE-2026-97229 is a critical RCE vulnerability in GitLab's CI/CD system.
  • •The flaw allows unauthenticated attackers to execute arbitrary code via crafted regex.
  • •GitLab urges immediate upgrades to patched versions 19.4.2, 19.3.4, and 19.2.8.

On October 12, 2026, GitLab released versions 19.4.2, 19.3.4, and 19.2.8 to address CVE-2026-97229, a critical integer overflow vulnerability in the CI/CD regular expression compiler, which allows unauthenticated remote code execution. The flaw, rated CVSS 10.0, affects all GitLab Community and Enterprise editions from version 19.1 onward. Attackers can exploit this vulnerability by submitting a specially crafted regular expression in a CI/CD configuration. GitLab has urged all self-managed installations to upgrade immediately, while GitLab.com is already patched. The patch also addresses 21 other vulnerabilities, including an XSS flaw with a CVSS score of 8.7. A known issue in version 19.3.4 affects merge request pages when the Ona integration is enabled, with a fix planned for version 19.3.5. The vulnerability was reported by researcher joaxcar through GitLab's HackerOne bug bounty program.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-08
Emergency patch released
GitLab released versions 19.4.2, 19.3.4, and 19.2.8 to fix CVE-2026-97229 and other vulnerabilities.
Cyberkendra
2026-10-12
Public disclosure of critical vulnerability
GitLab publicly disclosed CVE-2026-97229, an integer overflow flaw allowing RCE, urging users to upgrade immediately.
Daily.Dev

More articles in this cluster (5)

Following this threat?

Track CVE-2026-14814 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (17)

1 / 3

Common questions

Which versions are affected?
Versions 19.1 and later of GitLab Community and Enterprise Editions are affected.
Is there an active exploit for this vulnerability?
No confirmed exploitation has been reported; the vulnerability has been patched.
What should I do if I can't upgrade immediately?
It is recommended to restrict access to the GitLab instance until the upgrade can be performed.