ThreatsDay: Adobe RCE, DNS 钱包盗窃, NVIDIA 容器逃逸, 自愈后门 + 另外 23 个 · 3h Silent Lynx 利用 WinRAR 漏洞在独立国家联合体政府攻击中部署反向 Shell · 6h NGINX 修复 5 个漏洞，包括可能的 RCE 和可能跳过客户端证书检查的 TLS 漏洞 · 9h Next.js 发布了针对缓存和 SVG 处理中的两个关键 RCE 漏洞的紧急补丁 · 9h Drupal 修补了通过贡献模块无需登录路径的关键核心 RCE 漏洞 · 10h Sparx Systems Enterprise Architect软件中的漏洞 · 10h Curl 修复了由 Anthropic 发现的“高” RCE 漏洞 · 10h Slican电话交换机中的漏洞 · 11h Palo Alto Networks警告防火墙安全漏洞被滥用 · 14h 思科报告称Secure Email Gateway中的关键漏洞被积极利用 · 15h ThreatsDay: Adobe RCE, DNS 钱包盗窃, NVIDIA 容器逃逸, 自愈后门 + 另外 23 个 · 3h Silent Lynx 利用 WinRAR 漏洞在独立国家联合体政府攻击中部署反向 Shell · 6h NGINX 修复 5 个漏洞，包括可能的 RCE 和可能跳过客户端证书检查的 TLS 漏洞 · 9h Next.js 发布了针对缓存和 SVG 处理中的两个关键 RCE 漏洞的紧急补丁 · 9h Drupal 修补了通过贡献模块无需登录路径的关键核心 RCE 漏洞 · 10h Sparx Systems Enterprise Architect软件中的漏洞 · 10h Curl 修复了由 Anthropic 发现的“高” RCE 漏洞 · 10h Slican电话交换机中的漏洞 · 11h Palo Alto Networks警告防火墙安全漏洞被滥用 · 14h 思科报告称Secure Email Gateway中的关键漏洞被积极利用 · 15h

ACyber Sentinel 安全评估团队

← 返回

⚡ 情报报告

GitLab 修复 CVSS 10.0 漏洞，可能让未经身份验证的用户运行服务器代码

📰 The Hacker News 🕐 Oct 13, 2026 08:43 ⏱ 1 分钟阅读 ⚠️ 6 个漏洞

GitLab 已发布针对其社区版 (CE) 和企业版 (EE) 软件的最高严重性安全漏洞的补丁，该漏洞可能导致任意代码执行。

“GitLab 已修复一个问题，在某些情况下，未经身份验证的用户可能通过 CI/CD 配置中的特制正则表达式在 GitLab 服务器上执行任意代码，原因是正则表达式验证不足，”该公司在周一的公告中表示。

该漏洞被追踪为 CVE-2026-97229，描述为整数溢出问题。它的 CVSS 分数为 10.0。受影响的版本包括 -

所有 19.2 版本，低于 19.2.8

所有 19.3 版本，低于 19.3.5，和

所有 19.4 版本，低于 19.4.2

该漏洞的补丁已在版本 19.4.2、19.3.5 和 19.2.8 中提供。此外，还修复了三个高严重性漏洞 -

CVE-2026-92883 (CVSS 分数：8.7) - 一个跨站脚本漏洞，可能允许经过身份验证的用户通过特制的代码库在其他用户的浏览器会话中执行任意 JavaScript。

CVE-2026-16301 (CVSS 分数：8.5) - 下游管道创建服务中的不当授权漏洞，可能允许具有开发者角色的经过身份验证的用户在受保护的分支上执行 CI/CD 管道。

CVE-2026-14814 (CVSS 分数：8.2) - 一个宽松的正则表达式漏洞，可能允许用户污染原始代码库文件的缓存响应，导致目标用户的 CI/CD 管道执行特制内容，并可能暴露受保护的环境变量。

此次披露是在修复了 AI Gateway 中的一个关键漏洞 (CVE-2026-90970，CVSS 分数：9.9) 几周后，该漏洞可能允许具有 Duo Agent Platform 访问权限的经过身份验证的用户通过特制的流程配置突破提示模板沙箱，并在 AI Gateway 上实现任意命令执行。

上个月，GitLab CE 和 EE 中另一个最高严重性安全漏洞 (CVE-2026-85706，CVSS 分数：10.0) 在公开披露后数小时内就遭遇了实际探测。

觉得这篇文章有趣吗？请在 Google News、Twitter 和 LinkedIn 上关注我们，以阅读更多我们发布的独家内容。

相关漏洞

CVE-2026-97229 CVSS 10 CRITICAL Undergoing Analysis

CVE-2026-97229 - Integer Overflow or Wraparound in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

CVE-2026-92883 CVSS 8.7 HIGH Undergoing Analysis

CVE-2026-92883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.

CVE-2026-16301 CVSS 8.5 HIGH Undergoing Analysis

CVE-2026-16301 - Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.

CVE-2026-14814 CVSS 8.2 HIGH Undergoing Analysis

CVE-2026-14814 - Permissive Regular Expression in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.

CVE-2026-90970 CVSS 9.9 CRITICAL Awaiting Analysis

CVE-2026-90970 - Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

CVE-2026-85706 CVSS 10 CRITICAL Analyzed

CVE-2026-85706 - GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability - [Actively Exploited]

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.