CVE-2026-93577

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 19.2 through 19.2.6 GitLab CE/EE versions 19.3 through 19.3.2 GitLab CE/EE versions 19.4 through 19.4.0

Description An integer overflow occurs when compiling a specially crafted regular expression within a CI/CD configuration. This issue allows an authenticated user to execute arbitrary code on the server.

Recommendations Update GitLab CE/EE version 19.2 to 19.2.7. Update GitLab CE/EE version 19.3 to 19.3.3. Update GitLab CE/EE version 19.4 to 19.4.1.