CVE-2026-82837

GitLab CE/EE is affected by an insufficiently protected credentials issue in the Workhorse senddata emitters (internal data emission endpoints). Due to improper authorization checks, an authenticated user could access sensitive credentials and tokens without transiting the expected proxy. The iss...

PT-2026-92183

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.1.0 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description Improper authorization checks on internal data emission endpoints could allow an authenticated user to...

CVE-2026-13210: Incorrect Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input...

PT-2026-92163

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.6 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description An issue exists where an authenticated user could bypass SAML SSO sign-in restrictions and authenticate...

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Overview On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition CE and Enterprise Edition EE. The release addresses CVE-2026-85706, a critical path traversal vulnerability CWE-22 in the repository commits API with a CVSSv3.1 score of 10.0. According to GitLa...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read...

Exploit for CVE-2026-85706

CVE-2026-85706 Unauthenticated path traversal / arbitrary fil...

Exploit for CVE-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in G...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection...

CVE-2026-85706

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to...

CVE-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to...

CVE-2026-85706

GitLab CE/EE (18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1) is affected by a critical unauthenticated arbitrary file read (CVSS 10.0) in the repository commits and files API. The root cause is a parser differential between the Go reverse proxy Workhorse (matching routes on percent-encoded paths) and...

EUVD-2026-76779

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing...

CVE-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to...

CVE-2026-85706: Improper Limitation of a Pathname to a Restricted Directory

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to...

Exploit for CVE-2026-85706

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated a...

Exploit for CVE-2026-85706

CVE-2026-85706: GitLab CE/EE allows arbitrary file reading wit...

Exploit for CVE-2026-85706

CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local f...

Exploit for CVE-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in G...

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API...