GitLab Patches Maximum-Severity Path Traversal Flaw

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure.

CVE-2026-85706: CVSS 10.0 Path Traversal

The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server.

In-the-Wild Activity

According to the report, the flaw has witnessed in-the-wild probes within hours of public disclosure.