{"type":"analysis","id":"analysis:a-human-bounty-hunter-found-gitlab-s-12-year-old-cvss-10-0-bug-and-the-new-ai","slug":"a-human-bounty-hunter-found-gitlab-s-12-year-old-cvss-10-0-bug-and-the-new-ai","title":"A human bounty hunter found GitLab's 12-year-old CVSS 10.0 bug, and the new AI repo scanners don't look at the platform layer where it lived","description":"CVE-2026-110264 was reported by a HackerOne researcher. It sat in GitLab's regex compiler since version 7.0, and according to one outlet it is the second 10.0 regex overflow in nine days. In the same week, Claude Security and Codex added deeper GitLab integrations. They scan your code, not GitLab itself. Our inference is that each token they hold also depends on the host staying uncompromised.","published_at":"2026-10-27T05:00:00.000Z","updated_at":"2026-10-27T05:00:00.000Z","record_date":"2026-10-27","topics":["security","claude","codex"],"source_urls":["https://docs.gitlab.com/releases/patch-releases.xml","https://techcrunch.com/2026/09/29/openai-gives-codex-reusable-cloud-environments-that-work-across-devices","https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html","https://www.testingcatalog.com/claude-security-gets-continuous-scans-and-fix-tracking"],"language":"en","routes":{"html":"https://newruntime.com/analysis/a-human-bounty-hunter-found-gitlab-s-12-year-old-cvss-10-0-bug-and-the-new-ai/","markdown":"https://newruntime.com/analysis/a-human-bounty-hunter-found-gitlab-s-12-year-old-cvss-10-0-bug-and-the-new-ai.md","json":"https://newruntime.com/analysis/a-human-bounty-hunter-found-gitlab-s-12-year-old-cvss-10-0-bug-and-the-new-ai.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"story_cluster:gitlab-critical-patch-release-for-cve-2026-110264-e3fc357a3303","authorial_article_id":"04e9e6a2-8aad-4dd2-a0de-9b3e79a9bd70"},"next_reads":[{"type":"topic","path":"/topics/security/","url":"https://newruntime.com/topics/security/","title":"Security","reason":"Explore the security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/security.md","json_url":"https://newruntime.com/topics/security.json"},{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"topic","path":"/topics/codex/","url":"https://newruntime.com/topics/codex/","title":"Codex","reason":"Explore the codex topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/codex.md","json_url":"https://newruntime.com/topics/codex.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}