GitLab warns of new max severity code execution vulnerability

Sergiu Gatlan reports GitLab has released security patches for a maximumseverity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers This security issue is tracked as CVE2026110264 and was reported by a security researcher using the joaxcar handle through GitLabs HackerOne bug bounty program CVE2026110264 stems from an integer