GitLab CI

GitLab 19.4.1, 19.3.3, and 19.2.7 fix a critical double-free vulnerability (CVE-2026-89078, CVSS 9.9) in the regular expression parser that could let an authenticated user execute arbitrary code on the GitLab server via a specially crafted regex in a CI/CD configuration; the release also fixes an integer overflow in the regex compiler and several authorization and XSS issues affecting CE/EE. Self-managed GitLab installations must upgrade to one of these patched versions immediately, as unpatched versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 remain exposed.

Matters for: Teams operating self-managed GitLab CE/EE instances that run CI/CD pipelines with user-supplied regex configurations.

GitLab 19.4 adds MCP server CI/CD tools that let AI agents trigger, inspect, and control CI/CD pipelines and jobs from any MCP client, whereas previously agents had no way to trigger or inspect pipelines through MCP; access to these tools can also be governed and restricted using the same rules applied to internal GitLab Duo Agent Platform tools.

Matters for: Relevant for teams integrating AI agents or third-party MCP clients with GitLab CI/CD pipelines and needing governance over which agents can trigger or view pipeline jobs.

GitLab released versions 19.3.2, 19.2.6, and 19.1.8 for Community Edition and Enterprise Edition, containing important bug and security fixes for the CI/CD platform. GitLab.com already runs the patched version and GitLab Dedicated customers need not act, but self-managed installations must be upgraded to one of these versions immediately to close the fixed vulnerabilities.

Matters for: Administrators operating self-managed GitLab CE or EE instances that run their own CI/CD pipelines on-premises or in private infrastructure.

GitLab 19.3.1, 19.2.5, and 19.1.7 fix several vulnerabilities including a high-severity issue where a developer-role user could execute arbitrary commands in a CI context via the Duo Claude AI agent processing user-controlled configuration, plus denial-of-service and access-control flaws in import pipelines, SCIM API, protected environments, compliance frameworks, and pipeline execution policies. GitLab.com already runs the patched version and GitLab Dedicated needs no action, but self-managed installations must upgrade immediately since this is not a breaking change requiring code adjustments.

Matters for: Administrators running self-managed GitLab CE/EE instances, especially those using Duo Claude AI agents, SCIM user provisioning, or Pipeline Execution Policies in CI pipelines.