GitLab flaw lets outsiders run code on servers; exploited in the wild
Original title：CISA KEV added CVE-2026-97229: GitLab Community Edition and Enterprise Edition – GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
What happened
GitLab CE/EE has a flaw that lets an unauthenticated attacker run arbitrary code on the server, and CISA lists it as exploited in the wild. Self-hosted GitLab could be taken over, risking source code and secrets.
Who is affected
- Anyone self-hosting GitLab CE or EE
- Teams with GitLab reachable from the internet
What to do
Check GitLab's official advisory for the fixed version and update self-hosted instances immediately. Until then, restrict internet access and review CI/CD configs and logs for suspicious activity.
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| GitLab Community Edition / Enterprise Edition | 要確認 | 要確認 |
Why this flag
CISA KEV に掲載（悪用確認済み）かつ重大な影響
Red flag: session stopped — Exploitation confirmed with major impact. Assigned only when listed in CISA KEV or confirmed by a primary source.
Sources
- Primary source：CISA Known Exploited Vulnerabilities ↗
- CVE：CVE-2026-97229 ↗