Disclosure summary
GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.
CISA remediation guidance
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
CERT-FR all advisories · RSS-c131aad0c732be0b61dbe3287e4b0a64f03
Open original source · Updated Sep 29, 2026
Multiples vulnérabilités dans GitLab (30 septembre 2026)
CVE mention in publisher metadata; check the original affected versions.
Rapid7 Blog · RSS-b22f24efd8b2c76aee9d31c3c6d2e93793b
Open original source · Updated Sep 14, 2026
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
CVE mention in publisher metadata; check the original affected versions.
Original records & references
PUBLISHED 2026-09-11T00:00:00-04:00
MODIFIED 2026-09-11T00:00:00-04:00
INGESTED 2026-10-06T11:42:57-04:00