Engineering Leadership InfoQ · 2026-10-03T16:00:00Z · 1 min read

GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an unauthenticated remote attacker to read arbitrary files from the GitLab. By Sergio De Simone

Read original on InfoQ