GitLab CVE-2026-85706 Added to CISA KEV
ID: 1b0f52a2-c54c-5b78-9cd8-fec4b0dbbc4a
STIX ID: report--1b0f52a2-c54c-5b78-9cd8-fec4b0dbbc4a
Feed Name: SOCRadar Blog
Threat Score
CVE-2026-85706 is a critical (CVSS 10.0) unauthenticated path traversal vulnerability in GitLab CE/EE allowing arbitrary file reads on self-managed instances; CISA added it to the KEV due to active exploitation, GitLab released fixes (19.1.8, 19.2.6, 19.3.2), and defenders are advised to patch immediately, restrict access, hunt logs for suspicious /api/v4/projects/{id}/repository/commits/ activity, and rotate exposed secrets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.