Piece of news of the day

ADVANCED SECURITY EUROPA

EOOD

GitLab Issues Security Patches for Critical Flaw Allowing Remote Code Execution: Stay Safe!

22 October 2026

GitLab recently released security patches for a critical Regular Expression Compiler flaw (CVE-2026-110264) that could allow remote attackers to execute arbitrary code on vulnerable servers.
The vulnerability was reported through GitLab's bug bounty program and stems from an integer overflow weakness in the Regular Expression Compiler.
GitLab has fixed the issue in various versions of GitLab CE and EE and advised users to update immediately.
Another critical remote code execution vulnerability (CVE-2026-97229) in the CI/CD Regular Expression Compiler was also reported recently.
GitLab has been actively fixing vulnerabilities, with one flaw (CVE-2026-85706) allowing attackers to read sensitive data from servers.
CISA has issued warnings about GitLab vulnerabilities being actively exploited, with five flaws identified since November 2021.
GitLab's DevSecOps platform is widely used, with over 30 million users globally, including Fortune 100 companies like Nvidia and Goldman Sachs.