CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Summary
A critical integer overflow or wraparound vulnerability exists in GitLab Community Edition and Enterprise Edition. This flaw allows an unauthenticated user to execute arbitrary code on the GitLab server by submitting a specially crafted regular expression within a CI/CD configuration, stemming from insufficient validation.
IFF Assessment
The vulnerability allows for arbitrary code execution, which is a severe threat to system integrity and confidentiality.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: November 01, 2026. Known ransomware use: Unknown.
Defender Context
This vulnerability in GitLab's CI/CD configuration poses a significant risk, enabling unauthenticated attackers to achieve remote code execution. Defenders must prioritize applying vendor-provided mitigations promptly and follow CISA's guidance on prioritizing security updates based on risk, especially for internet-exposed assets.