by Kastro
Paper/Archive/CVE-2026-89078

CVE-2026-89078

GitLab GitLab — Double Free in GitLab

EPSS 0.5%CVSS 9.9
critical.is priorityof 100
38
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 42.2.422 × 208.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.

Affected

ProductAffectedFixed inSource
GitLab19.2 – < 19.2.719.2.7CNA
GitLab19.3 – < 19.3.319.3.3CNA
GitLab19.4 – < 19.4.119.4.1CNA

Scores by source

GitLab (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgitlab.com/gitlab-org/gitlab/-/work_items/628577exploithackerone.com/reports/4019059refdocs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-releasedrefruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves