GitLab patches maximum-severity flaw that could allow code execution on vulnerable servers

GitLab has issued fixes for CVE-2026-110264 in Community and Enterprise Edition, BleepingComputer and The Register report. GitLab says an integer overflow while compiling a specially crafted regular expression could, under certain conditions, have let an unauthenticated user execute code. The Register traces affected releases back to GitLab 7.0. GitLab urges affected installations to upgrade; GitLab.com is already patched, according to BleepingComputer.