compromised.live Free. No login.
Feed / CVE-2026-97229Also as JSON
ACT NOWExploited vulnerability GitLab Community Edition and Enterprise Edition

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

What's happening and what to do

An unauthenticated attacker can run arbitrary code on the GitLab server using a specially crafted regular expression in a CI/CD configuration; this flaw is being actively exploited. GitLab Community Edition and Enterprise Edition. Apply the vendor's update now and check for signs of compromise.

AI summary of the sources on this page. Regenerated when a source changes.

Signals over time

  1. 2026-10-29Added to CISA's Known Exploited Vulnerabilities catalog.
  2. 2026-11-01Federal patch deadline for US agencies.
  3. 2026-11-03 21:55First seen here.

Source text

GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.