CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

RBRecent Breaches Vulnerability Intelligence·Oct 29, 2026

CVSS 10.0 · Critical⚠ Actively exploited (CISA KEV)

10.0

CVSS score

Critical

Severity

Active

CISA KEV

Ransomware use

Nov 1, 2026

Patch deadline

⚠ Exploited in the wild. CISA added CVE-2026-97229 to its Known Exploited Vulnerabilities catalog on Oct 29, 2026, with a federal patch deadline of Nov 1, 2026 — meaning attackers are actively using it. If you run the affected software, patch it immediately.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Details

AffectedGitLab · Community Edition and Enterprise Edition

WeaknessCWE-190

CVSS base score10.0 (Critical)

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

PublishedOct 13, 2026

Added to CISA KEVOct 29, 2026

Federal patch deadlineNov 1, 2026

Known ransomware useNot documented

Check if your data is exposed →

Frequently asked questions

Is CVE-2026-97229 being actively exploited?

Yes — CISA lists CVE-2026-97229 in its Known Exploited Vulnerabilities (KEV) catalog, so it is confirmed exploited in the wild. Patch it as a priority.

What does CVE-2026-97229 affect?

CVE-2026-97229 affects GitLab · Community Edition and Enterprise Edition.

How do I fix CVE-2026-97229?

Apply the vendor’s patch for the affected software. The federal patch deadline was Nov 1, 2026. Then check whether your personal data was exposed in any related breach.

References

Official records: NVD · CISA KEV

← All actively-exploited vulnerabilities