thehackernews.com
Oct 29, 2026
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
AI-summarised brief · reviewed before publication
An attacker attempted to exploit CVE‑2026‑97229, a CVSS 10.0 flaw in GitLab’s Ruby engine, against Alpine Linux’s own GitLab server a week after the vendor released a patch. Alpine detected no successful compromise but rebuilt the server, reset all passwords, and replaced secret keys. The incident highlighted that upgrading GitLab alone is insufficient; users must also update Ruby to 3.3.13 or newer. Alpine confirmed all recent packages were built from verified sources and is testing the rebuilt system before reopening it.
💡 Why It Matters
- · The attack underscores that critical security patches can be missed when relying solely on upstream updates, forcing organizations to audit both application and underlying language runtimes.
- · It also demonstrates the importance of rapid incident response and thorough rebuilds to eliminate potential footholds.
