onyx --cves cve-2026-97229
CVE-2026-97229
- score
- 24.5
- cvss
- 10.0
- epss
- 0.5%
- published
- 2026-10-13
- kev added
- —
- first seen
GitLab CE/EE >= 19.2 < 19.2.8, >= 19.3 < 19.3.5, and >= 19.4 < 19.4.2 contain a remote code execution caused by insufficient regular expression validation in CI/CD configuration, letting unauthenticated users execute arbitrary code remotely, exploit requires crafted regex in CI/CD config.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- First advisory — GitLab security releases GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8
- Published
- First GitHub repository jburgess-r7/CVE-2026-97229-PoC — GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image · new repository
- Tracked by Onyx
- Public PoC
Community
1 mentions this week · GH 1
GitHub repositories 2
- GH gandli/cve-2026-97229-lab — CVE-2026-97229 GitLab CI lint regex integer overflow RCE — InstaBox version matrix reproduction & libruby gadget reverse engineering
- GH jburgess-r7/CVE-2026-97229-PoC — GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image
Advisories
0 feeds this week
Exploit availability
Public PoC flagged by vulnx; no direct exploit link among the citations.