CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
Rapid7 reproduced unauthenticated GitLab RCE CVE-2026-97229 (CVSS 10) and urges immediate patching.
On October 12, 2026, GitLab patched CVE-2026-97229, a CVSS 10.0 integer overflow (CWE-190) in the CI/CD regular-expression compiler affecting GitLab Community and Enterprise Edition. Rapid7 reproduced arbitrary code execution on the official GitLab 19.4.1 CE image by committing a malicious .gitlab-ci.yml and a UTF-8 repository path that makes Ruby's Onigmo engine recompile the expression and run an operating-system command as the git user. The same input did not execute on patched 19.4.2, and Rapid7 says there is no confirmed in-the-wild exploitation. Self-managed instances should upgrade to 19.2.8, 19.3.5, or 19.4.2 immediately; instances allowing self-registration are especially exposed.
- CVSS 10.0 integer overflow in GitLab's regex compiler
- Rapid7 achieved code execution on unpatched 19.4.1 CE
- Attack requires planting a malicious .gitlab-ci.yml
- No confirmed in-the-wild exploitation
- Fixed releases are 19.2.8, 19.3.5, and 19.4.2
Vulnerabilities mentionedAll →
- CVE-2026-9722910.0<1%Unauthenticated RCE in GitLab CE/EE via CI/CD regexpublished · GitLab CE/EE PoC ×3
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-97229 | Unauthenticated RCE in GitLab CE/EE via CI/CD regex |
Full article600 words · extracted from rapid7.com · click to collapse
Overview
On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in reproducing the exploit it was noted that an attacker must have a mechanism to plant a malicious CI/CD configuration to a repository prior to triggering the vulnerability. On GitLab instances where new users can self register and create projects, this constraint is removed.
The vulnerability affects self-managed GitLab instances across all deployment types. GitLab.com is already running a patched version, and GitLab Dedicated customers do not need to take action.
As of this writing, there is no confirmed in-the-wild exploitation of CVE-2026-97229. However, Rapid7 Intelligence has independently reproduced arbitrary code execution on an unpatched, official GitLab CE image. Given the vulnerability's maximum CVSS score, network-accessible trigger, and code execution in a GitLab application worker, Rapid7 recommends upgrading affected self-managed instances on an urgent basis, outside of normal patch cycles.
Technical overview
Rapid7's testing found that an attacker must first be able to commit a malicious CI/CD configuration file .gitlab-ci.yml, and a repository path containing UTF-8 characters to a branch in a public project. For example, an ordinary account can satisfy this prerequisite by creating a public project on a self-managed GitLab instance where that functionality is permitted.
The crafted regular expression initially compiles in a compact US-ASCII representation and passes GitLab's regular expression validation. When it is evaluated against a specially formed, valid UTF-8 repository path, Ruby's Onigmo regular expression engine recompiles it for the new encoding after those checks have completed. An integer overflow in the compiler's program-size calculation then causes invalid regular expression instructions to be generated. The resulting loss of control-flow integrity can be used to execute attacker-controlled Onigmo VM operations in the Ruby process and run an operating system command as the GitLab git user.
Rapid7 validated the complete chain against the official GitLab 19.4.1 CE Linux amd64 image with address space layout randomization enabled. The same input did not execute against the official patched 19.4.2 CE image. Further root cause and exploit-chain details will be included in a separate Rapid7 technical analysis.
Mitigation guidance
A vendor-provided patch is available to remediate CVE-2026-97229. Organizations running affected self-managed GitLab CE or EE instances should immediately upgrade to a fixed version, without waiting for a regular patch cycle:
Affected GitLab CE/EE versions | Fixed version |
|---|---|
All versions from 19.2 before 19.2.8 | 19.2.8 |
All versions from 19.3 before 19.3.5 | 19.3.5 |
All versions from 19.4 before 19.4.2 | 19.4.2 |
GitLab.com has already been updated, and GitLab Dedicated customers do not need to take action. Until affected self-managed instances can be upgraded, restricting anonymous access to public projects and preventing untrusted users from creating or writing to public projects can reduce exposure to the exploit path demonstrated by Rapid7. These controls address only the demonstrated delivery path and do not remediate the vulnerable regular expression compiler.
For the latest mitigation guidance, please refer to GitLab's security advisory.
Rapid7 customers
Exposure Command, Vulnerability Management, and Nexpose
Exposure Command, Vulnerability Management, and Nexpose customers can assess exposure to CVE-2026-97229 with an authenticated vulnerability check expected to be available in today’s (October 13) content release.
Updates
October 13, 2026: Initial publication.
- Added Rapid7 PoC Github repo link.