{"id":184003,"date":"2026-10-26T11:41:01","date_gmt":"2026-10-26T09:41:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimost-v-ruby-ekspluatiruemaya-dlya-udalyonnogo-vypolneniya-koda-v-gitlab"},"modified":"2026-10-26T11:41:08","modified_gmt":"2026-10-26T09:41:08","slug":"ruby-vulnerability-exploited-for-remote-code-execution-in-gitlab","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/ruby-vulnerability-exploited-for-remote-code-execution-in-gitlab","title":{"rendered":"Zranite\u013enos\u0165 v Ruby, ktor\u00e1 je zneu\u017e\u00edvan\u00e1 na vzdialen\u00e9 vykon\u00e1vanie k\u00f3du v GitLabe","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Boli zverejnen\u00e9 opravn\u00e9 verzie programovacieho jazyka Ruby 3.3.13, 3.4.12 a 4.0.9, v ktor\u00fdch bola odstr\u00e1nen\u00e1 kritick\u00e1 zranite\u013enos\u0165 (CVE-2026-110264), ved\u00faca k prete\u010deniu cel\u00e9ho \u010d\u00edsla pri kompil\u00e1cii \u0161peci\u00e1lne form\u00e1tovan\u00fdch regul\u00e1rnych v\u00fdrazov. T\u00e1to zranite\u013enos\u0165 m\u00f4\u017ee by\u0165 vyu\u017e\u00edvan\u00e1 na \u00fatoky na projekty nap\u00edsan\u00e9 v Ruby, ktor\u00e9 pou\u017e\u00edvaj\u00fa extern\u00e9 \u00fadaje v regul\u00e1rnych v\u00fdrazoch. Okrem toho bola potvrden\u00e1 mo\u017enos\u0165 zneu\u017eitia tejto zranite\u013enosti na vzdialen\u00e9 vykonanie k\u00f3du na platforme pre spolupr\u00e1cu GitLab. Probl\u00e9m bol \u010falej zablokovan\u00fd v aktualiz\u00e1ci\u00e1ch GitLab 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 a 18.11.13. Zranite\u013enosti bola pridelen\u00e1 \u00farove\u0148 nebezpe\u010denstva 10 z 10. <\/p>\n
Zranite\u013enos\u0165 je pr\u00edtomn\u00e1 v engine regul\u00e1rnych v\u00fdrazov Onigmo a vedie k prete\u010deniu intern\u00fdch identifik\u00e1torov pri kompil\u00e1cii vzoru s vysok\u00fdm po\u010dtom opakovan\u00ed. Probl\u00e9m sa prejavuje iba v aplik\u00e1ci\u00e1ch, ktor\u00e9 pou\u017e\u00edvaj\u00fa extern\u00e9 \u00fadaje v regul\u00e1rnych v\u00fdrazoch spracov\u00e1van\u00fdch cez met\u00f3dy Regexp.new, Regexp.union a Regexp.compile alebo literalov\u00e9 form\u00e1ty typu «\\\/#{input}\\\/». Obmedzenie ve\u013ekosti regul\u00e1rneho v\u00fdrazu alebo \u010dasu jeho spracovania cez met\u00f3du Regexp.timeout nezamyk\u00e1 zranite\u013enos\u0165, ke\u010f\u017ee na \u00fatok m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 kr\u00e1tke vzory. <\/p>\n
V GitLab m\u00f4\u017ee by\u0165 zranite\u013enos\u0165 zneu\u017eit\u00e1 neautentifikovan\u00fdm pou\u017e\u00edvate\u013eom kv\u00f4li substit\u00facii extern\u00fdch \u00fadajov do regul\u00e1rneho v\u00fdrazu. Detaily met\u00f3dy zneu\u017eitia zatia\u013e nie s\u00fa zverejnen\u00e9 (pod\u013ea pravidiel GitLab sa inform\u00e1cie spr\u00edstup\u0148uj\u00fa po 30 d\u0148och od zverejnenia opravy), no v sieti s\u00fa u\u017e zaznamenan\u00e9 pokusy o \u00fatoky na pou\u017e\u00edvate\u013eov GitLab. Nepriamymi znakmi pre realiz\u00e1ciu \u00fatoku m\u00f4\u017ee by\u0165 zv\u00fd\u0161en\u00fd po\u010det havarijn\u00fdch ukon\u010den\u00ed interpretera Ruby a n\u00e1rast ch\u00fdb v logoch s\u00favisiacich s vypr\u0161an\u00edm \u010dasu na vykreslenie str\u00e1nky pri spracovan\u00ed org-s\u00faborov.<\/p>\n
Okrem CVE-2026-110264 boli v eng\u00edne regul\u00e1rnych v\u00fdrazov odstr\u00e1nen\u00e9 \u010fal\u0161ie tri zranite\u013enosti: CVE-2026-89078 (dvojit\u00e9 oslobodenie pam\u00e4te pri neschopnosti analyzova\u0165 vzor po jeho zmene), CVE-2026-93577 a CVE-2026-97229 (prete\u010denia cel\u00fdch \u010d\u00edsel pri v\u00fdpo\u010dte ve\u013ekosti kompilovan\u00e9ho vzoru). \n Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"