Vulnerability intelligence

CVE-2026-97229: critical GitLab CI/CD RCE in the CISA KEV catalog

A sourced advisory on a critical unauthenticated GitLab CE/EE remote code execution vulnerability affecting 19.2, 19.3 and 19.4 patch branches.

IRIROSG Editorial·2026-10-13·1 min read·78 body words

CVE-2026-97229: critical GitLab CI/CD RCE in the CISA KEV catalog

IdentifierCVE-2026-97229

Vendor / productGitLab / GitLab CE/EE

Severity scoreCVSS 10

Added to CISA KEV2026-10-29

A KEV listing indicates evidence of real-world exploitation—not that every installation is compromised. Check your version, configuration and the vendor’s advisory.

CVE-2026-97229 is a critical GitLab CE/EE weakness involving regex validation and integer overflow in CI/CD configuration processing. The GitLab CNA assigns CVSS 3.1 score 10.0 and reports that unauthenticated remote code execution is possible under certain conditions. Fixed releases are 19.2.8, 19.3.5 and 19.4.2. CISA added the vulnerability to the KEV catalog on October 29, 2026. The full defensive analysis, affected versions and remediation workflow are available in Persian.

This is an English overview. The complete original article is currently published in Persian.

TRACEABLE KNOWLEDGE

Sources & further reading

Official CVE Program record by GitLab CNAhttps://www.cve.org/CVERecord?id=CVE-2026-97229

GitLab official patch release 19.4.2https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/

CISA Known Exploited Vulnerabilities cataloghttps://www.cisa.gov/known-exploited-vulnerabilities-catalog

NIST NVD vulnerability detailshttps://nvd.nist.gov/vuln/detail/CVE-2026-97229

IROSG / EDITORIAL

News and pioneer profiles use original writing with source attribution. Image credits and licenses are kept in each page’s sources section instead of beneath the images. CVE reference data credits its primary sources.

Editorial and image policy ↗