GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

October 3, 2026 · 4:00 pm 1 sources

Image: InfoQ

Coverage

More coverage

• GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration
  InfoQ · October 3, 2026 16:00
  CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an unauthenticated remote attacker to read arbitrary files from the GitLab. By Sergio De Simone