CVE-2026-97229 — Vulnerability intelligence

GitLab — Community Edition and Enterprise Edition

Published: 2026-10-13T01:05:46.166Z

CVSS

10

CISA KEV

Known exploitation

Original source text (not a translation)

GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Sources

• GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-97229