Source: cisa.gov
CVE-2026-85706 is a path traversal vulnerability affecting GitLab Community Edition and Enterprise Edition. An unauthenticated attacker can read arbitrary files on the server by exploiting improper path confinement and missing authentication enforcement in the repository commits API. The vulnerability does not require any credentials, significantly increasing its risk profile. CISA has flagged this under BOD 26-04, which prioritizes security updates based on risk. A patch has been released in GitLab version 19.3.2. Organizations using affected GitLab instances are urged to apply the patch immediately. CISA also provides forensic triage requirements for affected entities under the BOD 26-04 implementation guidance. The vulnerability is tracked in NVD as well.
