CVE-2026-85706: Actively Exploited Vulnerability

CVE-2026-85706 - GitLab Arbitrary File Read

Severity: CRITICAL (CVSS 10.0)
KEV Status: Actively Exploited

Affected Versions

• GitLab CE/EE 18.7 – 19.1.7
• GitLab CE/EE 19.2.0 – 19.2.5
• GitLab CE/EE 19.3.0 – 19.3.1

Vulnerability Description

An unauthenticated user can read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

Remediation

Upgrade to:

• GitLab 19.1.8 or later
• GitLab 19.2.6 or later
• GitLab 19.3.2 or later

References

• https://gitlab.com/gitlab-org/gitlab/-/work_items/627748
• https://hackerone.com/reports/3909881
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85706