HIGHVulnerability
Verified
Global

CISA KEV: GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.

Analysis

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-11. Remediation due: 2026-09-14.

Indicators of Compromise (1)

CVE (1)
CVE-2026-85706
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 11, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

UK banks pilot tokenised deposit transactions

UK banks have collaborated to complete the first live customer transactions using tokenised sterling deposits.

Finextra
MEDIUMVulnerabilityNEW

Over 75% of Organizations Experience Microsoft 365 Governance Issues

ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows

Infosecurity Magazine
MEDIUMVulnerabilityNEW

Revolut trials Pay with Smile

Revolut customers can now pay for coffee with their face at three Kiss the Hippo cafés in Bloomsbury, Chelsea and Soho.

Finextra