CVE-2026-85706
Known exploited · CISA KEV
CVSS 10 CRITICAL: gitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6…
CISA federal remediation date Sep 14 · date passed
Vulnerabilities · 35 days ago
CISA and multiple security reports now say CVE-2026-85706 in GitLab Community Edition and Enterprise Edition is being exploited in the wild, and CISA has added it to the Known Exploited Vulnerabilities catalog. GitLab fixed the issue in 19.1.8, 19.2.6, and 19.3.2, but the new listing turns this from a routine patch item into an emergency for self-managed instances.
The bug is in GitLab’s repository commits API: a crafted request can bypass the normal login check and make the server return files it should not expose. That can spill repository-stored secrets, tokens, logs, and configuration, so the fix stops new reads but does not undo anything already taken from disk.
For teams running GitLab as trusted development infrastructure, the remaining exposure is not just the app version but what may already have been read from the file layer. If GitLab sits beside code, credentials, or deployment material, the post-patch question is whether attackers also got the data that was supposed to stay inside the server.
Known exploited · CISA KEV
CVSS 10 CRITICAL: gitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6…
CISA federal remediation date Sep 14 · date passed
16 sources covering this story
Metasploit Wrap-Up Belgian Waffles Chocolates and Modules Frites
Rapid7 Website
GitLab Path Traversal Vulnerability | Outbreak Alert | FortiGuard Labs
FortiGuard Labs has observed attack activity targeting CVE-2026-85706, a critical path traversal vulnerability in GitLab Community Edition and Ente...
FortiGuard Labs Threat Signals
Threat Signal Report | FortiGuard Labs
What is the Vulnerability?FortiGuard Labs has observed attack activity targeting CVE-2026-85706, a critical path traversal vulnerability in GitLab ...
A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove
The vulnerability impacts self-managed CE and EE instances and provides an unauthenticated path to arbitrary file reads. It’s already being probed in the wild.
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.
Perfect-10 GitLab bug under attack days after patch lands
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
Malicious actors already using critical GitLab flaw, CISA and others warn
The vulnerability could let unauthenticated users access sensitive files from software-development environments.
CVE-2026-85706 Critical Gitlab Path Traversal Exploited in the Wild
GitLab has patched CVE-2026-85706, a CVSSv3.1 10.0 path traversal vulnerability in the repository commits API that allows an unauthenticated user to read arbitrary files from GitLab CE and EE servers.
Hackers Exploit Maximum Severity Flaw in GitLabs
CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0
GitLab ha publicado 1 vulnerabilidad de severidad crítica que, en caso de ser explotada, podría permit
CISA: Hackers now exploit max severity GitLab flaw in attacks
Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks.
Kwetsbaarheid verholpen in GitLab Community en Enterprise Editions
GitLab heeft een kwetsbaarheid verholpen in GitLab Community en Enterprise Editions.
Part of the PlainSec briefing for 2026-09-28