GoKawiil
Tech News
Attackers tried to exploit CVE-2026-97229, a maximum-severity remote code execution flaw in GitLab's CI/CD regex compiler, against Alpine Linux's development infrastructure on October 20-21, repeatedly crashing GitLab processes. Alpine found no direct evidence code was executed or packages tampered with, but due to missing logs it could not rule out compromise, so it rebuilt its GitLab instance and reset all passwords.
Alpine Linux said an attacker tried to exploit a critical GitLab vulnerability (CVE-2026-97229, CVSS 10.0) against its gitlab.alpinelinux.org instance on October 20-21, a week after a fix was released but before the instance was patched. The attempts crashed worker processes eight times and came close to succeeding, though the team found no confirmed evidence of a successful breach. As a precaution, the instance was rebuilt from scratch, all user passwords were reset, and the service is being tested before reopening to the public.