{"id":"CVE-2026-93577","aliases":[],"cve":{"records":[{"id":"CVE-2026-93577","source":"GitLab","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-18T10:34:29.905Z","published":"2026-09-23T23:04:45.296Z","modified":"2026-10-30T23:19:55.304Z"}],"publishers":[{"name":"GitLab","role":"CNA","organizationId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","modified":"2026-09-23T23:04:45.296Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-25T03:55:24.099Z"},{"name":"CVE","role":"ADP","organizationId":"af854a3a-2127-422b-91ae-364da2661108","modified":"2026-10-30T23:19:55.304Z"}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/629758","tags":[],"source":"GitLab"},{"url":"https://hackerone.com/reports/3995696","tags":["technical-description","exploit","permissions-required"],"source":"GitLab"},{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/","tags":[],"source":"GitLab"},{"url":"https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/","tags":[],"source":"CVE"}],"weaknesses":[{"id":"CWE-190","description":"CWE-190: Integer Overflow or Wraparound","source":"GitLab"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-24T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Integer Overflow or Wraparound in GitLab","titleSource":"GitLab","descriptionSource":"GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when compiling a specially crafted regular expression in a CI/CD configuration.","score":9.9,"severity":"critical","published":"2026-09-23T23:04:45.296Z","modified":"2026-10-30T23:19:55.304Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"GitLab","name":"GitLab","platforms":[],"versions":[{"version":"19.2","status":"affected","lessThan":"19.2.7","versionType":"semver"},{"version":"19.3","status":"affected","lessThan":"19.3.3","versionType":"semver"},{"version":"19.4","status":"affected","lessThan":"19.4.1","versionType":"semver"}],"defaultStatus":"unaffected","cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"source":"GitLab","url":"https://www.cve.org/CVERecord?id=CVE-2026-93577"}],"remediation":[{"text":"Upgrade to versions 19.2.7, 19.3.3, 19.4.1 or above.","source":"GitLab","url":"https://www.cve.org/CVERecord?id=CVE-2026-93577"}],"references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/629758","https://hackerone.com/reports/3995696","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/","https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"],"sources":[{"name":"CVE","id":"CVE-2026-93577","modified":"2026-10-30T23:19:55.304Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-93577"}],"assessments":[{"source":"GitLab","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","score":9.9}],"sourceAffected":[],"observedAt":"2026-10-31T00:35:09.955Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:10:33.488Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-31T00:35:35.280Z","attemptedAt":"2026-10-31T00:35:35.280Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-31T00:35:35.329Z","attemptedAt":"2026-10-31T00:35:35.329Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-31T00:35:35.508Z","attemptedAt":"2026-10-31T00:35:35.508Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-31T00:35:34.841Z","attemptedAt":"2026-10-31T00:35:34.841Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-93577","url":"https://www.first.org/epss/","probability":0.00593,"percentile":0.483,"date":"2026-10-30","checkedAt":"2026-10-31T00:35:34.841Z"},{"source":"NVD","id":"CVE-2026-93577","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93577","modified":"2026-10-31T00:16:51.887","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-31T00:35:35.280Z"},{"source":"GitHub Advisory Database","id":"GHSA-wqwg-376r-c226","url":"https://github.com/advisories/GHSA-wqwg-376r-c226","modified":"2026-10-31T00:30:31Z","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-31T00:35:35.329Z"},{"source":"ENISA EUVD","id":"EUVD-2026-85730","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85730","modified":"Sep 25, 2026, 3:55:24 AM","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-31T00:35:35.508Z"}],"aiSummary":{"text":"GitLab CE/EE versions before 19.2.7, 19.3.3, and 19.4.1 have an integer overflow issue that could allow an authenticated user to execute arbitrary code under certain conditions. The issue occurs when compiling a specially crafted regular expression in a CI/CD configuration.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T00:36:02.185Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-93577"}]}}