thehackernews.com
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab issued patches for a critical CVE‑2026‑97229 vulnerability affecting both its Community and Enterprise editions. The flaw, rated CVSS 10.0, stemmed from an integer overflow in regular‑expression validation within CI/CD configurations, allowing an unauthenticated attacker to execute arbitrary code on the server. Updated releases—19.4.2, 19.3.5 and 19.2.8—contain the fix and also resolve three additional high‑severity bugs. The advisory follows GitLab’s recent remediation of a 9.9‑scored AI Gateway issue and a prior 10.0‑rated flaw (CVE‑2026‑85706) that saw active [...]