Log in Start free

Vulnerability · Published Oct 22, 2026 · Assigned by GitLab

CVE-2026-110264Integer Overflow or Wraparound in GitLab

Critical 10.0

In plain English

A critical-severity integer overflow in GitLab from GitLab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 72% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)1.3%top 28.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.21ruby3.3.13-r0ALPINE-CVE-2026-110264
Alpine:v3.22ruby3.4.12-r0ALPINE-CVE-2026-110264
Alpine:v3.23ruby3.4.12-r0ALPINE-CVE-2026-110264
Alpine:v3.24ruby3.4.12-r0ALPINE-CVE-2026-110264
Debian:12ruby3.1no fix listedDEBIAN-CVE-2026-110264
Debian:13ruby3.3no fix listedDEBIAN-CVE-2026-110264
Debian:14ruby3.3no fix listedDEBIAN-CVE-2026-110264

Affected products (as reported)

VendorProductVersions
GitLab GitLab 7.0 – before 18.11.1319.0 – before 19.0.1019.1 – before 19.1.919.2 – before 19.2.919.3 – before 19.3.619.4 – before 19.4.319.5 – before 19.5.1

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References