ID:13134 - Exploit for Integer overflow in GitLab Enterprise Edition and Gitlab Community Edition - CVE-2026-97229

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the GitLab server.

The vulnerability exists due to integer overflow in the CI/CD regular expression compiler when processing regular expressions in CI/CD configurations. A remote attacker can supply a specially crafted regular expression in a CI/CD configuration to execute arbitrary code on the GitLab server.

Remediation