CISA Flags Active Exploitation of GitLab RCE Flaw CISA has added CVE-2026-97229 to its catalog of known exploited vulnerabilities after confirming an exploit in the wild. The maximum severity bug affects GitLab CE and, yes, is due to integer overflow in the regular expression CD/CI compiler, and can allow unauthenticated remote code execution using structured regular expressions in pipeline configuration files. Patch versions are 19.4.2, 19.3.5 and 19.2.8. The problem moves from fix preferences to an active event surface. GitLab says it has observed exploit attempts and released identifications for self-administered cases, while CISA ordered US federal agencies to patch by Sunday under BOD 26-04. Open sources - closed narratives.

CISA Flags Active Exploitation of GitLab RCE Flaw CISA has added CVE-2026-97229 to its catalog of known exploited vulnerabilities after confirming an exploit in the wild. The maximum severity bug affects GitLab CE and, yes, is due to integer overflow in the regular expression CD/CI compiler, and can allow unauthenticated remote code execution using structured regular expressions in pipeline configuration files. Patch versions are 19.4.2, 19.3.5 and 19.2.8. The problem moves from fix preferences to an active event surface. GitLab says it has observed exploit attempts and released identifications for self-administered cases, while CISA ordered US federal agencies to patch by Sunday under BOD 26-04. Open sources - closed narratives.