CVE-2026-110264

Summary

An integer overflow vulnerability in GitLab's regex compilation allows unauthenticated users to execute arbitrary code on the server under certain conditions, leading to full system compromise.

Exploitability

Exploitation requires sending a specially crafted regular expression to trigger the integer overflow; it is theoretically feasible but no public exploit exists yet.

Blast radius

Successful exploitation grants remote code execution with the privileges of the GitLab application, potentially compromising the entire server and any connected services or data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to GitLab 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, or 19.5.1 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.