CVE-2026-97229

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 19.2 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1

Description An integer overflow in the CI/CD Regular Expression Compiler allows an unauthenticated user to execute arbitrary code on the GitLab server. This occurs because the compiler does not properly validate input, enabling an attacker to trigger the overflow using a specially crafted regular expression within a CI/CD configuration file. Successful exploitation could lead to a full server takeover, exposing source code, CI secrets, and runners.

Recommendations Upgrade GitLab CE/EE version 19.2 to 19.2.8. Upgrade GitLab CE/EE version 19.3 to 19.3.5. Upgrade GitLab CE/EE version 19.4 to 19.4.2. Rotate CI/CD variables and tokens on any instance that was reachable from the internet after upgrading. Restrict public access to the instance until the update is applied.