CISA Confirms Active Exploitation of Max-Severity GitLab Vulnerability (CVE-2026-97229)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-97229, a maximum-severity GitLab vulnerability, to its Known Exploited Vulnerabilities catalog, confirming active attacks. The flaw, with a CVSS score of 10.0, is an integer overflow in GitLab's build pipeline compiler that could allow an unauthenticated attacker to execute code on vulnerable GitLab servers. GitLab has released patches for versions 19.4.2, 19.3.5, and 19.2.8.