Skip to content

CVE-2026-97229 Integer Overflow or Wraparound in GitLab

CriticalCVSS 10.0 EPSS 69.3% CISA KEV added 2026-10-29 · due 2026-11-01 Exploited in the wild Framework module PoC
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

CISA Known Exploited Vulnerability

Date added
2026-10-29
Due date (FCEB)
2026-11-01
Ransomware use
Unknown

Required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Affected products

ProductAffected versionsFixed in
redhat/ruby4.0(Red Hat:enterprise_linux:10.2) < 4.0.9-38.el10_2 4.0.9-38.el10_2
redhat/ruby(Red Hat:enterprise_linux:10.2) < 3.3.13-16.el10_2 3.3.13-16.el10_2
redhat/ruby(Red Hat:enterprise_linux:9) < 3.0.7-170.el9_8 3.0.7-170.el9_8
redhat/ruby:3.3-9080020261105110750.9(Red Hat:enterprise_linux:9) All versions No fix listed
redhat/ruby:4.0-9080020261105110139.9(Red Hat:enterprise_linux:9) All versions No fix listed
redhat/openvox-agent(Red Hat:satellite:6.16::el8) < 8.32.0-1.el8sat 8.32.0-1.el8sat
redhat/python-pyyaml(Red Hat:satellite:6.16::el8) < 6.0.1-1.el8pc 6.0.1-1.el8pc
redhat/openvox-agent(Red Hat:satellite_capsule:6.16::el8) < 8.32.0-1.el8sat 8.32.0-1.el8sat
redhat/python-pyyaml(Red Hat:satellite_capsule:6.16::el8) < 6.0.1-1.el8pc 6.0.1-1.el8pc
redhat/openvox-agent(Red Hat:satellite:6.16::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/python-pyyaml(Red Hat:satellite:6.16::el9) < 6.0.1-1.el9pc 6.0.1-1.el9pc
redhat/openvox-agent(Red Hat:satellite_capsule:6.16::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/python-pyyaml(Red Hat:satellite_capsule:6.16::el9) < 6.0.1-1.el9pc 6.0.1-1.el9pc
redhat/openvox-agent(Red Hat:satellite:6.17::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/openvox-agent(Red Hat:satellite_capsule:6.17::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/openvox-agent(Red Hat:satellite:6.18::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/openvox-agent(Red Hat:satellite_capsule:6.18::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/openvox-agent(Red Hat:satellite:6.19::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/openvox-agent(Red Hat:satellite_capsule:6.19::el9) < 8.32.0-1.el9sat 8.32.0-1.el9sat
redhat/ruby3-4-main(Red Hat:hummingbird:1) < 3.4.12-33.1.hum1 3.4.12-33.1.hum1
redhat/ruby4-0-main(Red Hat:hummingbird:1) < 4.0.9-41.hum1 4.0.9-41.hum1
redhat/ruby3-3-main(Red Hat:hummingbird:1) < 3.3.13-23.8.hum1 3.3.13-23.8.hum1
redhat/ruby(Red Hat:rhel_els:6) All versions No fix listed
redhat/ruby(Red Hat:rhel_els:7) All versions No fix listed
redhat/ruby:2.5/ruby(Red Hat:enterprise_linux:8) All versions No fix listed
Show 33 more
ProductAffected versionsFixed in
redhat/ruby:3.3/ruby(Red Hat:enterprise_linux:8) All versions No fix listed
gitlab >= 19.2, < 19.2.8 19.2.8
gitlab >= 19.3, < 19.3.5 19.3.5
gitlab >= 19.4, < 19.4.2 19.4.2
debian/ruby3.1(Debian:12) All versions No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-7 No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-7+deb12u1 No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-7+hurd.1 No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-8 No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-8.1~exp1 No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-8.3 No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-8.4 No fix listed
debian/ruby3.1(Debian:12) = 3.1.2-8.5 No fix listed
debian/ruby3.3(Debian:13) < 3.3.13-0+deb13u1 3.3.13-0+deb13u1
debian/ruby3.3(Debian:13) = 3.3.8-2 No fix listed
debian/ruby3.3(Debian:13) = 3.3.8-2.1 No fix listed
debian/ruby3.3(Debian:13) = 3.3.8-2.2 No fix listed
debian/ruby3.3(Debian:14) All versions No fix listed
debian/ruby3.3(Debian:14) = 3.3.8-2 No fix listed
debian/ruby3.3(Debian:14) = 3.3.8-2.1 No fix listed
debian/ruby3.3(Debian:14) = 3.3.8-2.2 No fix listed
alpine/ruby(Alpine:v3.21) >= 3.3.0, < 3.3.13-r0 3.3.13-r0
alpine/ruby(Alpine:v3.22) >= 3.3.0, < 3.4.12-r0 3.4.12-r0
alpine/ruby(Alpine:v3.23) >= 3.3.0, < 3.4.12-r0 3.4.12-r0
alpine/ruby(Alpine:v3.24) >= 3.3.0, < 3.4.12-r0 3.4.12-r0
gitlab >= 19.2.0, < 19.2.8 19.2.8
gitlab >= 19.3.0, < 19.3.5 19.3.5
gitlab >= 19.4.0, < 19.4.2 19.4.2
ruby-lang ruby >= 3.3.0, < 3.3.13 3.3.13
ruby-lang ruby >= 3.4.0, < 3.4.12 3.4.12
ruby-lang ruby >= 4.0.0, < 4.0.8 4.0.8
azure linux ruby(Azure Linux:4.0) < 0:3.4.12-38.azl4 0:3.4.12-38.azl4
azure linux ruby(Azure Linux:3.0) < 3.3.13-0 3.3.13-0

References