{"id":246243,"date":"2026-10-31T03:26:10","date_gmt":"2026-10-31T08:26:10","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/cisa-says-max-severity-gitlab-flaw-now-exploited-in-the-wild"},"modified":"2026-10-31T03:26:10","modified_gmt":"2026-10-31T08:26:10","slug":"cisa-says-max-severity-gitlab-flaw-now-exploited-in-the-wild","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/cisa-says-max-severity-gitlab-flaw-now-exploited-in-the-wild","title":{"rendered":"CISA says max severity GitLab flaw now exploited in the wild"},"content":{"rendered":"\n<p>Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).<\/p>\n<p>Tracked as <a href=\"https:\/\/docs.gitlab.com\/releases\/patches\/patch-release-gitlab-19-4-2-released\/#cve-2026-97229---integer-overflow-issue-in-cicd-regular-expression-compiler-impacts-gitlab-ceee\" target=\"_blank\" rel=\"nofollow noopener\">CVE-2026\u201397229<\/a>, this critical security flaw was discovered by a security researcher using the \u2018<a href=\"https:\/\/hackerone.com\/joaxcar\" target=\"_blank\" rel=\"nofollow noopener\">joaxcar<\/a>\u2019 handle in the CI\/CD Regular Expression Compiler, which parses, compiles, and evaluates regular expressions in pipeline configuration files.<\/p>\n<p>CVE-2026\u201397229 stems from an <a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/190.html\" target=\"_blank\" rel=\"nofollow noopener\">integer overflow weakness<\/a> and could let remote attackers run arbitrary code on targeted instances via a maliciously crafted regular expression in a CI\/CD configuration, due to insufficient expression validation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). Tracked as CVE-2026\u201397229, this critical security flaw was discovered by a security researcher using the \u2018joaxcar\u2019 handle in the CI\/CD Regular Expression Compiler, which parses, compiles, and evaluates regular expressions in pipeline configuration [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-246243","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246243","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=246243"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246243\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=246243"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=246243"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=246243"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}