GitLab warns of max severity code execution vulnerability

A maximum-severity integer overflow vulnerability in GitLab's CI/CD Regular Expression Compiler allows unauthenticated remote attackers to execute arbitrary code on unpatched self-managed GitLab servers. Because no authentication is required to exploit this flaw, the attack surface is extremely broad — any internet-exposed GitLab instance is at risk. This underscores the danger of delaying patches on critical developer infrastructure, which often holds source code, secrets, and pipeline credentials. Organizations without a formal emergency patching process are especially vulnerable, as the window between public disclosure and active exploitation is shrinking.