GitLab CE/EE: crafted CI/CD regex lets an unauthenticated user run code on the GitLab server

Impact

An unauthenticated attacker can execute arbitrary code on the GitLab server through a specially crafted regular expression in a CI/CD configuration, scored 10.0 with a scope change. For a GPU fleet this is the build-and-deploy brain: a self-managed GitLab typically holds the registry credentials, Kubernetes deploy tokens, runner registration tokens and model-pipeline secrets used across the cluster, so server-side code execution converts directly into the ability to push poisoned container images and job definitions onto GPU nodes. Compromise of the CI server also means every subsequent training or serving deployment must be treated as suspect until images are rebuilt from a known-good state.

Who can reach it

Anyone who can reach the GitLab web interface, with no authentication required. Instances exposed to the internet or to a broad corporate network are directly reachable; the only real mitigation before patching is to restrict network access to the GitLab front end.

What to do

Upgrade to GitLab 19.2.8, 19.3.5 or 19.4.2 (or later) per the 19.4.2 patch release. This is a package upgrade plus service restart of the GitLab application - CI jobs in flight will be interrupted, but no GPU node needs to be drained. Because the flaw is pre-authentication RCE, rotate runner registration tokens, CI variables and registry credentials on any instance that was internet-reachable before the upgrade.

References

Related entries

• Kubeflow Pipelines frontend (/_proxy/ route, proxy-middleware.ts): The pipelines frontend hands any unauthenticatedNCVD-2026-042-kubeflow-pipelines-frontend-prox · Kubeflow Pipelines frontend (/_proxy/ route, proxy-middleware.ts)Critical
• HTCondor (condor_credd): condor_credd can be told to create or write files as root outsideCVE-2021-25311 · HTCondor (condor_credd)Critical
• RKE / Rancher (k8s control plane): full-cluster-state configmap in kube-system readable by non-adminsCVE-2023-32191 · RKE / Rancher (k8s control plane)Critical
• VMware Aria Automation (missing access control): An authenticated user reaches remote organizations and workflows theyCVE-2023-34063 · VMware Aria Automation (missing access control)Critical
• Cisco Nexus Dashboard Fabric Controller (REST API / web UI): A low-privileged NDFC userCVE-2024-20432 · Cisco Nexus Dashboard Fabric Controller (REST API / web UI)Critical
• Zabbix: SQL injection in CUser::addRelatedObjects reachable by ANY non-admin account with API accessCVE-2024-42327 · ZabbixCritical