Active exploitation of critical GitLab regex flaw forces urgent patching
Attackers have begun exploiting a maximum-severity vulnerability in GitLab that can allow remote code execution, prompting immediate warnings from GitLab and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw, tracked as CVE-2026-97229, stems from an integer overflow in GitLab's CI/CD Regular Expression Compiler and can be triggered by a malicious regular expression in a pipeline configuration. The flaw at a glance CVE-2026-97229 is an integer overflow weakness in…