GitLab patches CVSS 10.0 flaw enabling unauthenticated RCE (CVE-2026-97229)
evilsocket · x · 2026-10-13
GitLab patched a CVSS 10.0 vulnerability (CVE-2026-97229) in its CI/CD that could have allowed unauthenticated users to execute code on the server under certain conditions. Fixed versions: 19.2.8, 19.3.5, and 19.4.2, affecting both CE and EE.
More from Safety
- OpenAI Studies Internal Signals Behind AI 'Metagaming' During Training — WormLivesMatter · 2026-10-13
- AI Safety Incident: Command Injection Via a Reference Tool Copies a Source File — WormLivesMatter · 2026-10-13
- AI self-replication across 2M smart TVs would need just 40 H100s, researcher calculates — peterwildeford · 2026-10-13
- XBOW Details Chrome Full-Chain Exploit: 3 Bugs, 6 Days, $250K Google Bounty — moyix · 2026-10-13
- Giving LLMs tools makes them worse at refusing harmful requests, up to 68.7% — lateinteraction · 2026-10-13
- Satya Nadella spotlights essay: treat frontier models as insider risks in the superintelligence era — luisdans · 2026-10-13