CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability. GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.
- CISA KEV-listed (remediation due 2026-09-14)
- EPSS 97.4% (99.9% percentile)
- CVSS 10 critical