GitLab admins urged to patch critical code to be run remotely flaw

What happened

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD (the automated pipeline that tests and ships code changes) Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. GitLab admins urged to patch (a fix the maker issues for a flaw in its software) critical RCE (running programs on a machine from somewhere else) flaw (CVE-2026-97229 (the public catalogue number for a specific software flaw)), according to Help Net Security.

About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in GitLab’s CI/CD Regular Expression Compiler, and it affects both GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab has assigned the vulnerability a CVSS score of 10.0, the highest possible. According to the CVSS vector, … More → The post GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) appeared first on Help Net Security .