Status: KEV
| Advisory ID: CVE-2026-85706
Key Details
| CVE | CVE-2026-85706 |
| Vulnerability Name | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability |
| CVSS Score / Version | 10.0 (Critical) / CVSS v3.1 |
| Updated | 2026-09-22 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is none. |
| Affected products | GitLab Community Edition and Enterprise Edition |
| Exploitation status | Listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating confirmed active exploitation. |
| KEV listing | Added to CISA's Known Exploited Vulnerabilities (KEV) catalog on 2026-09-11. |
| Exploitation prediction (EPSS) | 91.42% probability of exploitation in the next 30 days (100% percentile) -- FIRST.org's EPSS model. |
Affected Products, Subsystems & Sectors
| Subsystems | General OT |
| Sectors | Multiple |
What to Know
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.
What to Do
Monitor GitLab's web page for any future patch releases.
References
KEV Required Action