Exploit
GitLab Issues Critical Patch for CVSS 10.0 RCE Vulnerability CVE-2026-97229
October 12, 2026
Cybersecurity
Exploit
Key Facts
Signal Type
Exploit
Industry
Cybersecurity
Companies
GitLab, HackerOne, Airbus
Date
October 12, 2026
On October 8, 2026, GitLab issued critical patches for a maximum-severity vulnerability, CVE-2026-97229, impacting self-managed CI/CD installations. This integer overflow flaw, with a CVSS score of 10.0, allows unauthenticated attackers to execute arbitrary code via specially crafted regular expressions in CI/CD configurations.
The vulnerability was reported by a researcher known as joaxcar through GitLab's HackerOne program. It affects all GitLab Community Edition (CE) and Enterprise Edition (EE) versions from 19.1 onward.
The flaw impacts all self-managed GitLab installations running versions 19.1 through 19.4.1, 19.3.3, and 19.2.7, as well as earlier versions. GitLab has urged these customers to upgrade immediately to versions 19.4.2, 19.3.4, or 19.2.8.
GitLab.com, the SaaS offering, is already running the patched version, and GitLab Dedicated customers do not need to take action. The patch also addresses 22 other vulnerabilities, including high-severity issues related to cross-site scripting (XSS) and authorization bypass.
Monitor for active exploitation of CVE-2026-97229, as the CVSS 10.0 score indicates high risk. Security researchers and threat intelligence feeds (such as those tracking Airbus or specific CVEs) may provide early indicators of attempts.
Also watch for cascading impacts from the additional 22 vulnerabilities patched in the same release, which may expand the attack surface for unpatched installations over time.
Source:
ThreatCluster Threat FeedGet cybersecurity signals in your CRM
Data breaches, ransomware events, funding rounds, and M&A across security vendors and targets.
