{"uuid": "2945ec77-93c8-44ab-a0b8-47e6e1118dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117253567771400768", "content": "\ud83d\udea8 GitLab CVSS 10 vulnerability exploited just one day after disclosure\nThreat actors have begun exploiting CVE-2026-85706, a critical path traversal vulnerability affecting self-hosted GitLab Community and Enterprise Edition instances.\u2800The flaw allows an unauthenticated attacker to read arbitrary files from a vulnerable GitLab server using a single HTTP request.\nAffected versions include:\n\u2022 GitLab 18.7 through versions before 19.1.8\u2022 GitLab 19.2 through versions before 19.2.6\u2022 GitLab 19.3 through versions before 19.3.2\u2800GitLab disclosed and patched the vulnerability on September 10.\nJust one day later, watchTowr began observing in-the-wild exploitation attempts and warns that mass exploitation is likely to follow.\u2800Administrators should upgrade immediately to GitLab 19.1.8, 19.2.6, 19.3.2, or a newer supported release.\nGitLab.com is already patched.\nSource: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/", "creation_timestamp": "2026-09-11T17:24:18.188298Z"}