CERT24Over 1,000 GitLab servers vulnerable to ongoing RCE attacksLoading data…
CERT24Threat Observatory
Period

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

More than 1,000 Internet-exposed GitLab servers remain unpatched against a maximum-severity vulnerability that is actively exploited in remote code execution attacks. Tracked as CVE-2026-97229, the flaw could, under certain conditions, allow an unauthenticated user to execute arbitrary code on a GitLab server through a specially crafted regular expression.

← Back to intelligence

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

More than 1,000 Internet-exposed GitLab servers remain unpatched against a maximum-severity vulnerability that is actively exploited in remote code execution attacks. Tracked as CVE-2026-97229, the flaw could, under certain conditions, allow an unauthenticated user to execute arbitrary code on a GitLab server through a specially crafted regular expression.