CVE-2026-89078

Published Sep 24, 2026

Last updated 13 days ago

GitLab CE/EE

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-89078 is identified as a double free vulnerability affecting the regular expression parser in GitLab Community Edition (CE) and Enterprise Edition (EE). This flaw could enable an authenticated user to execute arbitrary code on the GitLab server. The vulnerability is triggered when a specially crafted regular expression is parsed within a CI/CD configuration. GitLab has released remediations for this issue, impacting versions 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1.

Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.
Source: cve@gitlab.com
NVD status: Modified
Products: gitlab

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.9
Impact score: 6
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Severity: CRITICAL

Weaknesses

cve@gitlab.com: CWE-415

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "matchCriteriaId": "2E337204-7AC0-4D9A-ADE3-D435F0E8F4CB",
            "versionEndExcluding": "19.2.7",
            "versionStartIncluding": "19.2.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "matchCriteriaId": "501CC95C-E50C-47C8-A7E0-68B106B22291",
            "versionEndExcluding": "19.2.7",
            "versionStartIncluding": "19.2.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
            "versionEndExcluding": "19.3.3",
            "versionStartIncluding": "19.3.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
            "versionEndExcluding": "19.3.3",
            "versionStartIncluding": "19.3.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
            "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.