Critical Vulnerability in GitLab Allows Remote Code Execution

## Overview GitLab has disclosed a critical vulnerability, CVE-2026-110264, affecting multiple versions of GitLab CE/EE. This vulnerability allows unauthenticated users to execute arbitrary code on the GitLab server under specific conditions. ## Technical Details The issue arises from an integer overflow that occurs when compiling a specially crafted regular expression. This flaw affects all versions from 7.0 prior to 18.11.13, 19.0 prior to 19.0.10, 19.1 prior to 19.1.9, 19.2 prior to 19.2.9, 19.3 prior to 19.3.6, 19.4 prior to 19.4.3, and 19.5 prior to 19.5.1. Attackers can exploit this vulnerability to gain control over the server, leading to severe security risks. ## Impact The vulnerability has a CVSS score of 10.0, indicating its critical nature. If exploited, it could allow attackers to run arbitrary code, potentially compromising the entire GitLab instance and any sensitive data it holds. Organizations using affected versions should treat this vulnerability with urgency. ## Mitigation Defenders should immediately update their GitLab installations to the latest versions that address this vulnerability. The patched versions include 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1. Regularly check for updates and apply security patches promptly to mitigate risks associated with this and other vulnerabilities.