GitLab patches a max-severity regex flaw alongside five high-severity bugs
GitLab patched unauthenticated CI/CD regex RCE CVE-2026-97229 (CVSS 10) and five high-severity flaws.
GitLab released Community and Enterprise Edition versions 19.4.2, 19.3.5, and 19.2.8 fixing CVE-2026-97229, an integer overflow in the CI/CD regular-expression compiler scored CVSS 10.0. A crafted regular expression in CI/CD configuration could let an unauthenticated attacker execute arbitrary code on the server. Five high-severity issues include stored XSS (CVE-2026-92883, 8.7), unauthorized protected-branch pipelines (CVE-2026-16301, 8.5), cache poisoning of raw files (CVE-2026-14814, 8.2), pipelines after project transfer (CVE-2026-81839, 7.7), and GitLab Duo agent-instruction injection (CVE-2026-96893, 7.3). GitLab.com is already patched, Dedicated customers need no action, and self-managed administrators are urged to upgrade immediately.
- CVE-2026-97229 is CVSS 10.0 unauthenticated RCE
- Fixed in GitLab 19.2.8, 19.3.5, and 19.4.2
- Five additional high-severity bugs were also patched
- GitLab.com is updated; self-managed installs must upgrade
- Technical issue details stay private for 90 days
Vulnerabilities mentionedAll →
- CVE-2026-9722910.0<1%Unauthenticated RCE in GitLab CE/EE via CI/CD regexpublished · GitLab CE/EE PoC ×3+5 related
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-97229 |
Full article518 words · extracted from csoonline.com · click to collapse
GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous integration and delivery (CI/CD) platform.
The vulnerability, tracked as CVE-2026-97229, was fixed in versions 19.4.2, 19.3.5, and 19.2.8 of its Community Edition (CE) and Enterprise Edition (EE), according to a patch advisory.
The company urged administrators of self-managed installations running affected versions to upgrade immediately. GitLab.com is already running the patched version, while GitLab Dedicated customers do not need to take action, the company said in the advisory.
The release also addresses vulnerabilities that could expose protected environment variables, allow unauthorized pipeline execution, and enable attackers to inject crafted content into AI agent instructions. The fixes span both CE and EE, with some issues affecting only the Enterprise Edition.
“When no specific deployment type (omnibus, source code, Helm chart, etc.) of a product is mentioned, it means all types are affected,” GitLab added.
Critical regex flaw could enable unauthenticated code execution
GitLab described CVE-2026-97229 as an integer overflow issue in the platform’s CI/CD regular expression compiler. Under certain conditions, insufficient validation of regular expressions could have allowed an unauthenticated attacker to execute arbitrary code on the GitLab server by supplying a specially crafted regular expression in a CI/CD configuration.
The vulnerability affects GitLab CE and EE versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. It carries a maximum CVSS score of 10.0 for potentially allowing remote code execution without authentication, with impacts on confidentiality, integrity, and availability across security boundaries.
GitLab credited researcher Johan Carlsson with reporting the flaw through its HackerOne bug bounty program.
Pipeline permissions and AI agents in the crosshairs
Among the five high-severity vulnerabilities, CVE-2026-92883 could allow an authenticated user to execute arbitrary JavaScript in other users’ browser sessions through a specially crafted repository. The cross-site scripting flaw resulted from improper sanitization of HTML attributes in syntax-highlighted output and carries a CVSS score of 8.7.
Two other flaws target pipeline security. CVE-2026-16301 (CVSS 8.5) could have allowed users with the Developer role to execute CI/CD pipelines on protected branches without authorization. CVE-2026-14814 (CVSS 8.2) potentially enabled attackers to poison cached responses for raw repository files, potentially causing targeted pipelines to execute malicious content and access protected environment variables.
The remaining issues affect scheduled pipeline execution and GitLab Duo. CVE-2026-81839 (CVSS 7.7) could have allowed authenticated users to run arbitrary pipelines in a transferred project with the new group’s privileges. Another, CVE-2026-96893 (CVSS 7.3), could have allowed an authenticated user to inject crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users.
GitLab said it plans to make vulnerability issue details public 90 days after the release in which they were patched. Administrators should therefore prioritize the applicable security updates rather than wait for further technical disclosure. The release also fixes several low-to-medium severity vulnerabilities affecting GitLab Pages, Kubernetes proxying, GraphQL APIs, merge requests, custom roles, the package registry, and repository and project import functions.