CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

T1Covered by 1 source · first reported by Rapid7 at 13 Oct, 11:29 UTC

Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of…