CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability. GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.

Related briefings

Browse the CVE database

Read the full analysis on IntelFusions