CyberSecurity News

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

Dark Reading

· September 14, 2026

AI summary

A recently identified vulnerability in GitLab has been assigned a perfect severity score, indicating a high level of risk. The flaw, designated as CVE-2026-85706, is a path traversal vulnerability that affects both Community and Enterprise Editions of GitLab. This issue poses a significant threat to supply chains. The vulnerability has a maximum CVSS score of 10 out of 10, highlighting its potential impact. Both GitLab Community Edition and Enterprise Edition instances are vulnerable to this flaw.

Vulnerabilities mentioned

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

Read the full article at Dark Readingwww.darkreading.com/cyberattacks-data-breaches/maximum-severity-gitlab-flaw-supply-chains-risk

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to Dark Reading.