Sploitus Arbitrary File Reading Vulnerability in GitLab (CVE-2026-85706)
Article Content
- •CVE-2026-85706 allows unauthorized file access in GitLab CE/EE.
- •Affected versions include 18.7 and later; patches were released on September 10, 2026.
- •Proof-of-concept code is available, indicating active exploitation potential.
GitLab's Workhorse component has a vulnerability (CVE-2026-85706) allowing unauthenticated attackers to read arbitrary files. This issue affects GitLab CE/EE versions 18.7 and later. Attackers can exploit this by manipulating request parameters, bypassing security filters. The vulnerability was publicly disclosed on September 12, 2026, and added to CISA's KEV list on September 11, 2026. Proof-of-concept code is available, enabling exploitation without authentication. The vulnerability allows access to sensitive files like '/etc/passwd'. GitLab has released patches for affected versions on September 10, 2026. Users are urged to update immediately to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-85706 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially… Critical PHP Vulnerabilities Exploited Before Public Disclosure Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network. Both…