CVE-2026-89078

🚨 GITLAB CRITICAL PATCH: AUTH RCE VIA REGEX PARSER (CVE-2026-89078 / CVE-2026-93577) GitLab released Critical patch versions 19.4.1, 19.3.3, and 19.2.7 on September 23, 2026 for CE/EE. Lead Critical issues (both CVSS 9.9): * CVE-2026-89078 — authenticated remote code execution via a double-free in the regular-expression parser when handling a crafted regex in CI/CD configuration * CVE-2026-93577 — authenticated remote code execution via an integer overflow in the regular-expression compiler under the same class of crafted CI/CD regex input Also in the same release: High XSS in the merge request diff viewer (CVE-2026-84739) plus several Medium/Low authz issues. Impacted: GitLab CE/EE from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 (XSS reach extends further back on some issues). http://GitLab.com is already patched; Dedicated customers need no action. Self-managed installs should upgrade immediately. ⚠️ Analyst Note: This is an official GitLab Critical patch release, not a dark-web leak claim and not a CISA KEV add as of our check. Both Critical RCEs require an authenticated user. No in-the-wild exploitation is claimed in the vendor notes reviewed here. Credit on the Critical regex issues: joaxcar via HackerOne. Primary: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/ #DDW #DarkWeb #GitLab #CVE202689078 #CVE202693577 #RCE #ThreatIntelligence #CyberSecurity

🚨 GitLab'da iki kritik RCE açığı için acil güvenlik güncellemesi yayınlandı! CVE-2026-89078 ve CVE-2026-93577, CI/CD yapılandırmalarında özel hazırlanmış regex'lerin işlenmesi sırasında oluşan double-free ve integer overflow hataları üzerinden, kimliği doğrulanmış saldırganların GitLab sunucusunda keyfi kod çalıştırmasına yol açabiliyor. 🔴 Her iki açık: CVSS 9.9 Etkilenen sürümler: 19.2 < 19.2.7 19.3 < 19.3.3 19.4 < 19.4.1 GitLab, self-managed kurulumların 19.4.1 / 19.3.3 / 19.2.7 sürümlerine yükseltilmesini öneriyor. https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/

🚨 CRITICAL | GitLab Security Alert GitLab just shipped patches 19.4.1, 19.3.3 &amp; 19.2.7 fixing two CVSS 9.9 Critical RCE flaws. 💥 CVE-2026-89078 — Double-free in regex parser 💥 CVE-2026-93577 — Integer overflow in regex compiler

Self-managed GitLab: two CVSS 9.9 RCEs landed yesterday. CVE-2026-89078 and CVE-2026-93577 let an authenticated user run code on the server via a crafted regex in CI/CD config. https://GitLab.com is patched. Your box is not.

🚨Critical - GitLab CI/CD regex parsing RCE (CVE-2026-89078, CVE-2026-93577) GitLab CE/EE has double-free and integer-overflow flaws in CI/CD config parsing when handling specially crafted regular expressions. An authenticated user can potentially achieve arbitrary code execution on the GitLab server during pipeline processing. 👉Affected: GitLab CE/EE < 19.2.7, 19.3.0-19.3.2, 19.4.0 | Upgrade to 19.2.7/19.3.3/19.4.1

🚨 ALERT — CRITICAL GITLAB CI/CD RCE FLAWS DATE: September 23, 2026 CONFIRMED BY: GitLab PRODUCT: GitLab CE/EE — Self-Managed CVEs: CVE-2026-89078 — CVSS 9.9 CVE-2026-93577 — CVSS 9.9 IMPACT: Authenticated attackers may, under specific conditions, execute arbitrary code on the GitLab server using specially crafted regular expressions in CI/CD configuration. AFFECTED VERSIONS: 19.2 before 19.2.7 19.3 before 19.3.3 19.4 before 19.4.1 EXPLOITATION STATUS: No confirmed in-the-wild exploitation found in the reviewed official sources. URGENT ACTION: Upgrade Self-Managed GitLab immediately to 19.2.7, 19.3.3, or 19.4.1+ as applicable. http://GitLab.com is already patched; GitLab Dedicated requires no customer action. SOURCE: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/ #CyberSecurity #InfoSec #ThreatIntel #GitLab #CVE #RCE #CICD #DevSecOps #Vulnerability #SecOps

Both affect CI/CD regex processing and could let an authenticated user execute arbitrary code on the GitLab server. 🔗 CVE-2026-89078: https://www.cve.org/CVERecord?id=CVE-2026-89078 🔗 CVE-2026-93577: https://www.cve.org/CVERecord?id=CVE-2026-93577 #GitLab #CyberSecurity #CVE #RCE #InfoSec

🚨 GitLab Critical Patch Release Fixes Severe RCE Flaws — CVE-2026-89078 Critical Vulnerability Alert! GitLab Community Edition and GitLab Enterprise Edition (self-managed) is affected by CVE-2026-89078. 🔍 Identify Targets via ZoomEye: Search Dork: app="GitLab" Exposure: 1.3m instances identified globally. ZoomEye Search Link: 👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJHaXRMYWIi #Infosec #CyberSecurity #ZoomEye

🚨 #ALERT — CRITICAL GITLAB CI/CD RCE FLAWS DATE: September 23, 2026 CONFIRMED BY: GitLab PRODUCT: GitLab CE/EE — Self-Managed CVEs: CVE-2026-89078 — CVSS 9.9 CVE-2026-93577 — CVSS 9.9 IMPACT: Authenticated attackers may, under specific conditions, execute arbitrary code on the GitLab server using specially crafted regular expressions in CI/CD configuration. AFFECTED VERSIONS: 19.2 before 19.2.7 19.3 before 19.3.3 19.4 before 19.4.1 EXPLOITATION STATUS: No confirmed in-the-wild exploitation found in the reviewed official sources. URGENT ACTION: Upgrade Self-Managed GitLab immediately to 19.2.7, 19.3.3, or 19.4.1+ as applicable. http://GitLab.com is already patched; GitLab Dedicated requires no customer action. SOURCE: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/ #CyberSecurity #InfoSec #ThreatIntel #GitLab #CVE #RCE #CICD #DevSecOps #Vulnerability #SecOps