CVE-2026-85706 1

Vulnerability (CVE)

CVE-2026-85706: Git Lab Community Edition and Enterprise Edition Path Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 11, 2026

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.

Vulnerabilities & Patching