GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- GitLab
- Product
- Community Edition and Enterprise Edition
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Developer platform
Why it ranks 56 (Critical)
- CISA KEV listed
- Product class: developer platform
- Covered by 2 independent sources
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-85706 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.