The GitLab CVSS 10.0 RCE Has a Public Exploit: Patch Today (2026)
On 12 October 2026, GitLab shipped a patch for CVE-2026-97229, a CVSS 10.0 unauthenticated remote code execution flaw in the CI/CD regular expression compiler. Four days later, researcher Jonah Burgess published a working CVE-2026-97229 exploit on GitHub — a public proof of concept that runs commands on a vulnerable server as the operating-system git account. … Read more