{"id":"CVE-2026-97229","url":"https://compromised.live/t/CVE-2026-97229","kind":"exploited_vuln","tier":1,"severity":"high","title":"GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability","summary":"An unauthenticated attacker can run arbitrary code on the GitLab server using a specially crafted regular expression in a CI/CD configuration; this flaw is being actively exploited. GitLab Community Edition and Enterprise Edition. Apply the vendor's update now and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-29","due_date":"2026-11-01","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.","aliases":["BIT-gitlab-2026-97229","CVE-2026-97229"],"sources":[{"name":"kev","id":"CVE-2026-97229","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97229"}]}