{"id":"CVE-2026-89078","published":"2026-09-24T00:17:22.060","lastModified":"2026-09-28T15:22:58.227","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","cwes":["CWE-415"],"vendors":["gitlab"],"products":["gitlab"],"references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/","tags":["Release Notes","Vendor Advisory"]},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/628577","tags":["Issue Tracking"]},{"url":"https://hackerone.com/reports/4019059","tags":["Permissions Required"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is a double free issue in GitLab's CI/CD configuration parsing, allowing an authenticated user to execute arbitrary code on the server. This is critical as it can lead to full server compromise.","exploitability":"Exploitation requires an authenticated user with access to a specially crafted regular expression in a CI/CD configuration. The attacker must have the ability to inject such a configuration.","blast_radius":"If exploited, the attacker could gain full control over the GitLab server, potentially leading to data theft, service disruption, and further lateral movement within the network.","remediation":"Upgrade to GitLab CE/EE 19.2.7 or later, 19.3.3 or later, or 19.4.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-required","web","ci-cd"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-27T08:48:24.498Z"}}