TechFo Breaking: GitLab CVE-2026-97229

Oct 30, 2026 2:32

Audio file

CISA has added a maximum-severity GitLab vulnerability, CVE-2026-97229 (CVSS 10.0), to its Known Exploited Vulnerabilities catalog. An unauthenticated attacker can execute code on a self-hosted GitLab server through a crafted CI/CD pipeline configuration. Daniel and Theo break down who is affected, how it works, and the fix: update to GitLab 19.2.8, 19.3.5, or 19.4.2 before the November 1…