12-Year-Old GitLab Vulnerability Allows Remote Code Execution on Self-Managed Server

Home Cyber Security 12-Year-Old GitLab Vulnerability Allows Remote Code Execution on Self-Managed Server By Guru Baran October 22, 2026 GitLab has released urgent security updates for a critical vulnerability that could let attackers run code on self-managed servers without logging in.

Tracked as CVE-2026-110264, the flaw carries the maximum CVSS score of 10.0 and affects both GitLab Community Edition and Enterprise Edition. The company published the fixes on October 21, 2026. The affected code reaches back to GitLab 7.0, released in 2014, giving the vulnerability a roughly 12-year history. That does not mean attackers have been using it for 12 years.

GitLab’s advisory describes the risk but does not report confirmed attacks or provide a public exploit. GitLab Remote Code Execution Flaw According to GitLab’s official security advisory , the vulnerability involves an integer overflow when the server compiles a specially crafted regular expression. Regular expressions are patterns used to match text.

Under certain conditions, processing an attacker-controlled pattern could allow arbitrary code to run on the server.…

Abbreviated excerpt as provided by the publisher; the full article is at the canonical source. Attributed to Cyber Security News · Limited verification; verify facts against the linked source. Read the full article on cybersecuritynews.com.

Source published: 22 Oct 2026, 07:36 AM IST. Source facts take precedence over AI interpretation.