‼️ GitLab's CVSS 10 file-read flaw (CVE-2026-85706) drew in-the

Back Facebook

‼️ GitLab's CVSS 10 file-read flaw (CVE-2026-85706) drew in-the

Facebook • September 11, 2026

Share: View original

GitLab’s CVSS 10 file-read flaw (CVE-2026-85706) drew in-the-wild probes within hours of disclosure.

If an instance has at least one public project, unauthenticated attackers can read logs and config files containing credentials and secrets.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both vulnerabilities affect GitLab Community Edition (CE) and Enterprise Edition (EE) versions from 18.7 up to 19.3.2. Just one day after the patches were released, threat intelligence firm WatchTowr reported active exploitation attempts targeting CVE-2026-85706. Organizations running self-managed GitLab instances are urged to upgrade immediately, as the vulnerabilities can expose sensitive data and configurations. The situation is critical, with the potential for widespread exploitation expected soon. 30 sources 81

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

CWE-200 - Exposure of Sensitive Information

MITRE ATT&CK (1)

T1552.001 - Credentials In Files