Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.
Summary
CVE-2026-85706 is a critical vulnerability in GitLab CE/EE that allows unauthenticated users to read arbitrary files from the server due to improper path confinement and missing authentication enforcement in the repository commits API. This affects multiple versions of GitLab, specifically those prior to the specified patch versions.
Mitigation
To remediate this vulnerability, it is essential to upgrade to the patched versions of GitLab CE/EE as specified in the advisory. Ensuring proper authentication enforcement in the API is also recommended.
Weakness Classification (CWE)
Exploit Prediction (EPSS)
References
Primary Sources
Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.
Does this affect your version?
Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.