GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

T2Critical 100Covered by 1 source · first reported by InfoQ at 03 Oct, 16:00 UTC

CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an unauthenticated remote attacker to read arbitrary files from the GitLab. By Sergio De Simone

devsecurity

Sources

• T2GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data ExfiltrationInfoQ03 Oct, 16:00

Vulnerabilities

• CVE-2026-85706