{"id":"CVE-2026-110264","published":"2026-10-22T01:16:57.603","lastModified":"2026-10-22T23:18:22.670","description":"An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/","tags":[]},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/633633","tags":[]},{"url":"https://hackerone.com/reports/4093475","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An integer overflow vulnerability in GitLab's regex compilation allows unauthenticated users to execute arbitrary code on the server under certain conditions, leading to full system compromise.","exploitability":"Exploitation requires sending a specially crafted regular expression to trigger the integer overflow; it is theoretically feasible but no public exploit exists yet.","blast_radius":"Successful exploitation grants remote code execution with the privileges of the GitLab application, potentially compromising the entire server and any connected services or data.","remediation":"Upgrade to GitLab 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, or 19.5.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","integer-overflow","regex","unauthenticated","web"],"model":"garnet-coder","analyzedAt":"2026-10-24T08:46:36.784Z"}}