KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2026-85706
GitLab · Community Edition and Enterprise Edition
GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.
Correlated Federal Court Cases & Exploitation Context (0)
No federal court indictment in the current archive directly cites CVE-2026-85706. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2026-09-11.
Associated Government Advisories
Tracked under CISA Known Exploited Vulnerabilities Binding Operational Directive 22-01 for federal civilian agency remediation.