cve-2026-85706

cve-2026-85706 GitLab CE/EE 中未认证的任意本地文件读取。影响 18.7–19.1.7、19.2.0–19.2.5、19.3.0–19.3.1。已在 19.1.8 / 19.2.6 / 19.3.2 中修复（2026-09-10）。CVSS 10.0，据称已在野利用。原始报告由 s3ntago 提交，本仓库只是我的分析文章 + PoC。 免责声明 本 PoC 仅出于教育和防御性研究目的发布，旨在帮助管理员和研究人员理解并测试该漏洞。请仅针对你拥有或已获得明确书面授权测试的系统运行它。如果你的实例处于受影响范围内，请停止阅读并先修补到 19.1.8 / 19.2....

Exploit for Path Traversal in Gitlab

cve-2026-85706 Unauthenticated arbitrary local file read in G...

The vulnerability of the requestBodyUploader component in the application programming interface of a git-based software platform, which facilitates collaborative code development on GitLab, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the requestBodyUploader component in the application programming interface of a git-based software platform for collaborative code development on GitLab is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability may allow an attack...