CVE-2026-85706 actively exploited: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

CISA added CVE-2026-85706, a path traversal in GitLab Community Edition and Enterprise Edition, to its Known Exploited Vulnerabilities catalogue. It allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Federal agencies must remediate by September 14, 2026.