GitLab urges immediate patching of maximum-severity code execution flaw
GitLab has warned administrators of self-managed installations to patch immediately after disclosing a maximum-severity vulnerability in its CI/CD Regular Expression Compiler that could allow remote attackers to run arbitrary code on affected servers. The flaw, tracked as CVE-2026-97229, is fixed in the latest releases of GitLab Community and Enterprise Edition.
