Perfect-10 GitLab bug under attack days after patch lands
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
A critical GitLab flaw, assigned the maximum severity score of 10.0 by the Common Vulnerability Scoring System, is being actively exploited by cyber attackers. This path traversal bug in the repository commits API allows unauthenticated attackers to read arbitrary files from vulnerable servers. The US Cybersecurity and Infrastructure Security Agency has added this vulnerability, CVE-2026-85706, to its Known Exploited Vulnerabilities catalog.
GitLab released patches for the flaw on September 10, urging users to upgrade their systems immediately. The vulnerability affects GitLab Community Edition and Enterprise Edition across various versions. GitLab.com is already patched, but GitLab Dedicated customers need to take action. Security firms have observed probes for this vulnerability in the wild, warning that widespread exploitation is likely.
To mitigate the risk, organizations with self-hosted GitLab instances should either patch their systems or remove them from public access. Monitoring for specific HTTP requests can help administrators detect potential exploitation attempts.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
