GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
September 11, 2026
1 min read
4 views
cybersecurity
threats
news
GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure.
The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server under
Was this article helpful?
0 found this helpful