{"id":183799,"date":"2026-10-13T04:58:54","date_gmt":"2026-10-13T02:58:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimost-v-gitlab-dopuskayushhaya-udalyonnoe-vypolnenie-koda"},"modified":"2026-10-13T04:58:57","modified_gmt":"2026-10-13T02:58:57","slug":"gitlab-vulnerability-allowing-remote-code-execution","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/gitlab-vulnerability-allowing-remote-code-execution","title":{"rendered":"A vulnerability in GitLab that allows for remote code execution","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Corrective updates have been released for the GitLab collaborative development platform \u2014 versions 19.4.2, 19.3.4, and 19.2.8, addressing 24 vulnerabilities. The most critical vulnerability (CVE-2026-97229) allows remote code execution on the server. This issue is caused by an integer overflow in the regular expression compilation code. An unauthenticated user can exploit this by using a specially crafted regular expression in the CI\/CD configuration. The vulnerability has been assigned a severity level of 10 out of 10.<\/p>\n
All users are strongly advised to urgently apply the update. Details of the issue are not yet disclosed and will be made public 30 days after the release of the fix (recently a similar vulnerability was fixed in the libpcre2 library, but it was not caused by an integer overflow). Information on the vulnerability has been reported to GitLab under the ongoing HackerOne bug bounty program. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"