Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open

An attacker attempted to exploit a critical GitLab vulnerability (CVE-2026-97229, CVSS 10.0) targeting Alpine Linux's own GitLab server approximately one week after GitLab released a patch. The flaw allows remote code execution via a crafted regular expression embedded in a CI configuration file. Alpine Linux reported the attack but found no evidence of successful exploitation. The vulnerability is rooted in a Ruby-related issue that GitLab left exposed. The incident highlights the narrow window between patch release and active exploitation attempts. This is a maximum-severity vulnerability given its CVSS score of 10.0 and the nature of the exploit vector. Organizations running self-hosted GitLab instances are strongly advised to apply the patch immediately. The attack on Alpine Linux's infrastructure underscores the risk to open-source project hosting environments.