Arbitrary Code Execution Vulnerability in GitLab CE/EE
⚠️ CVE-Referenzen:
CVE-2026-89078
Gitlab - Gitlab - CRITICAL - CVE-2026-89078.
A vulnerability in GitLab CE/EE allows an authenticated user to execute arbitrary code on the server under certain conditions. This issue arises from a double free memory error when parsing specially crafted regular expressions in a CI/CD configuration. The flaw affects specific versions of GitLab CE/EE, which have been patched to prevent this exploit.
Quelle: securityvulnerability.io