🛡️ CVE-2026-85706

The items that name it 8

• CISA says max severity GitLab flaw now exploited in the wild
  articleas cves2026-10-30
• Critical GitLab RCE Lets Unauthenticated Attackers Execute Code on Servers (CVE-2026-97229)
  advisoryas cves2026-10-14It is written here as CVE-2026-85706 (prior GitLab max-severity flaw; in-the-wild probing within hours of public disclosure, later added to CISA's KEV catalog).

  prior GitLab max-severity flaw; in-the-wild probing within hours of public disclosure, later added to CISA's KEV catalog

• Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
  articleas cves2026-09-25

  Unauthenticated arbitrary local file read in GitLab repository commits and files APIs; affects GitLab CE and EE versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. Exploited in the wild. Exploited by a new Metasploit module (gather/gitlab_file_read_cve_2026_85706).

• Breaking: GitLab Critical Path Traversal Flaw Exploited in the Wild — Patch Immediately
  advisoryas cves2026-09-14

  Critical path traversal / unauthenticated arbitrary file read via GitLab repository commits API endpoint (/api/v4/projects/{id}/repository/commits/) using a crafted HTTP POST request with a file.path parameter. Requires no authentication, only that at least one public project exists on the instance.

• CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
  advisoryas cves2026-09-14

  Critical path traversal vulnerability (CWE-22) in the GitLab repository commits API. CVSSv3.1 score 10.0. Improper path confinement and missing authentication enforcement could allow an unauthenticated user to read arbitrary files from an affected GitLab server under certain conditions. Added to CIS

• CVE-2026-85706: GitLab CE/EE Repository Commits API Path Traversal
  advisoryas classification.key entities2026-09-11
• Rapid Reaction: GitLab Critical Path Traversal Vulnerability (CVE-2026-85706)
  advisoryas cves2026-09-11

  Critical path traversal vulnerability in the repository commits API affecting GitLab CE and EE; allows an unauthenticated user to read arbitrary files from the GitLab server due to improper path confinement combined with missing authentication enforcement; CVSS score 10.0

• Rapid Reaction: GitLab Path Traversal Vulnerability (CVE-2026-85706)
  advisoryas cves2026-09-11

  Critical path traversal vulnerability in the repository commits API of GitLab CE and EE, allowing an unauthenticated user to read arbitrary files from the GitLab server due to improper path confinement combined with missing authentication enforcement. CVSS score 10.0.