GitLab · GitLab CE/EE
Updated November 6, 2026
An integer overflow in GitLab’s regex engine lets unauthenticated users trigger arbitrary code execution by submitting a malicious regular expression in a CI/CD configuration. The flaw bypasses normal authentication checks because the pipeline parsing runs before auth is enforced.
Attackers can gain full control of the GitLab server, exfiltrate repositories, inject ransomware, or use the server as a foothold for further network compromise.
Upgrade to the patched GitLab version; disable unauthenticated pipeline creation; validate and sanitize all regex inputs in CI/CD files.
More active vulnerabilities