AIKIDO-2026-296161
gitlab-ce is vulnerable to Remote Code Execution (RCE)
99
Critical Risk
This Affects:
gitlab-ceTL;DR
The CI/CD configuration regular-expression compiler overflows an integer when compiling a specially crafted pattern. An authenticated user who can place that pattern in a pipeline configuration can trigger the overflow and execute arbitrary code on the GitLab server. The fix bounds compilation so an oversized pattern cannot wrap the integer and corrupt memory.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and authenticated users can create or edit CI/CD configuration.
Background info
gitlab-ce is vulnerable to Remote Code Execution (RCE) in versions 19.2.0 - 19.2.6, 19.3.0 - 19.3.2 and 19.4.0 - 19.4.0.
How to fix this
Upgrade the gitlab-ce and/or the gitlab-ee library to the patch version.
Links
docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/gitlab.com/gitlab-org/gitlab/-/work_items/629758hackerone.com/reports/3995696
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.