GitLab patches unauthenticated code execution bug CVE-2026-110264
Original title: GitLab critical patches include one for a bug that allows code execution by unauthenticated users
The integer overflow hits GitLab CE/EE back to 7.0; fixes include 19.5.1 and backports through 18.11.13.
GitLab on Wednesday released Community and Enterprise Edition updates fixing a dozen bugs, including critical CVE-2026-110264. Under certain conditions, an unauthenticated user could execute arbitrary code by triggering an integer overflow while compiling a crafted regular expression. A high-severity OmniAuth-to-LDAP flaw, CVE-2026-15723, could let an authenticated user take over an LDAP-backed account. GitLab also stripped a trusted flag from client-supplied MCP tools in Workhorse. Exploitation is not stated.
Unconfirmed: No exploitation status is stated, and the Ruby/Onigmo scope beyond GitLab is analyst commentary.
- Impacted ranges run from 7.0 before 18.11.13 through 19.5 before 19.5.1.
- Patched releases are 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13.
- LDAP takeover requires both OmniAuth SAML and LDAP auto-linking enabled.
- Release notes say the patch includes database migrations and single-node downtime.
Impact: Unauthenticated arbitrary code execution on the GitLab server
| Product | Affected | Fixed in |
|---|---|---|
| GitLab CE/EE | 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 | 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 |
- 1.Upgrade GitLab CE/EE to 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, or 18.11.13.
- 2.Plan for downtime on single-node instances while database migrations run.
- 3.Check shadow and legacy GitLab servers, which remain in scope back to 7.0.
- Vendors
- GitLab
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-110264 | Unauthenticated RCE in GitLab CE/EE via regex integer overflow | 10.0 | <1% | PoC ×8 | |
| CVE-2026-15723 | LDAP account takeover in GitLab when SAML and LDAP auto-link are on | 8.2 | — |
From the original article
4 min read at csoonline.com
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions. The most serious of the security issues, labeled critical in severity, is CVE-2026-110264, an integer overflow issue.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.