{"id":"CVE-2026-93577","published":"2026-09-24T00:17:22.850","lastModified":"2026-09-28T15:22:15.293","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when compiling a specially crafted regular expression in a CI/CD configuration.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":["gitlab"],"products":["gitlab"],"references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/","tags":["Release Notes","Vendor Advisory"]},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/629758","tags":["Issue Tracking"]},{"url":"https://hackerone.com/reports/3995696","tags":["Permissions Required"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is an integer overflow issue in GitLab's CI/CD configuration handling, allowing an authenticated user to execute arbitrary code. This is critical as it can lead to full server compromise.","exploitability":"Exploitation is moderately hard, requiring an authenticated user and a specially crafted regular expression. Precondition is access to the GitLab instance.","blast_radius":"If exploited, the attacker could gain full control over the GitLab server, leading to data loss, service disruption, and potential lateral movement within the network.","remediation":"Upgrade to GitLab CE/EE 19.2.7 or later, 19.3.3 or later, or 19.4.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-required","web","ci-cd"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-27T08:48:30.670Z"}}