security_identifier

CVE-2026-85706

Identifier for a path traversal vulnerability in the commit API of self-managed GitLab, scored CVSS 10.0, that permits reading files from the server without authentication.

Current clusters

security1 publisher

CISA flags GitLab path traversal CVE-2026-85706 as actively exploited

CISA added CVE-2026-85706 to the Known Exploited Vulnerabilities catalog on September 11. Under BOD 26-04 that makes it a fast-lane patch for federal agencies and a question about whether anyone got in first.

Publishers:cisa.gov

Reality

Evidence72
Adoption35
Hype gap−10
Incentives30
Confidence62

build1 publisher

A file.path parameter in GitLab's commit API reads server files before authentication

The fix ships in 19.3.2, 19.2.6 and 19.1.8, and scanning for the flaw started the day after disclosure. Whether you can tell if a read succeeded on your instance depends on whether your proxy logs request bodies.

Publishers:dev.to

Reality

Evidence60
Adoption35
Hype gap−10
Incentives40
Confidence58