Attacker targeted Alpine Linux's GitLab via CVSS 10.0 flaw

Alpine Linux said an attacker tried to exploit a critical GitLab vulnerability, CVE-2026-97229 (CVSS 10.0), on its own GitLab server a week after a fix was released. The flaw allows code execution via a crafted regular expression in a CI configuration. No evidence of a successful compromise was found.

• CVE-2026-97229 carries a maximum CVSS score of 10.0
• The attack came a week after GitLab shipped a patch
• Exploitation works via a crafted regex in CI configuration
• Alpine found no evidence the attack succeeded