GitLab Patches Max-Severity Unauthenticated Path Traversal Flaw in Repository Commits API (CVE-2026-85706, CVSS 10.0)
GitLab Patches Max-Severity Unauthenticated Path Traversal (TL-2026-2442) is a critical-severity software vulnerability scored CVSS 10, first published 2026-09-11. It has no confirmed attribution, affects GitLab Inc. GitLab Community Edition (CE), references 2 CVEs (CVE-2026-85706, CVE-2026-87719), maps to 8 MITRE ATT&CK techniques (T1005, T1078, T1190), and is covered by 9 detection rules and 11 indicators of compromise.
Key facts for TL-2026-2442
- Threat ID
- TL-2026-2442
- Severity
- CRITICAL
- CVSS
- 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)
- Status
- PATCHED
- Category
- VULNERABILITY
- First published
- 2026-09-11
- Last reviewed
- 2026-09-11
- Attribution confidence
- LOW
- Motivation
- UNKNOWN
- Target sectors
- technology, software-development
- Detection rules
- 9
- Indicators of compromise
- 11
Malware and tooling in GitLab Patches Max-Severity Unauthenticated Path Traversal
Malware and tooling: GitLab Advanced Search, GitLab Duo Chat
GitLab's September 10, 2026 critical patch release (19.3.2, 19.2.6, 19.1.8) fixes CVE-2026-85706, a maximum-severity (CVSS 10.0) unauthenticated path-traversal flaw in the repository commits API that lets remote attackers read arbitrary files from self-managed GitLab CE/EE servers, and CVE-2026-87719 (CVSS 9.9), an insecure-deserialization bug in the GraphQL subscription serializer that lets an authenticated user with Duo Chat access steal Advanced Search instance configuration and credentials. GitLab.com and GitLab Dedicated are unaffected; neither CVE is listed in CISA's KEV catalog and no public PoC or in-the-wild exploitation has been confirmed for either flaw.
How GitLab Patches Max-Severity Unauthenticated Path Traversal works
On September 10, 2026, GitLab shipped a critical patch release (versions 19.3.2, 19.2.6, and 19.1.8 for both Community Edition and Enterprise Edition) that fixes 18 vulnerabilities reported through GitLab's HackerOne bug-bounty program, headlined by two critical, unrelated-mechanism flaws.
CVE-2026-85706 (CVSS 3.1: 10.0, AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) is a path-traversal vulnerability in the repository commits API caused by improper path confinement combined with missing authentication enforcement (CWE-22 / CWE-306). It requires no account and no user interaction: an unauthenticated remote attacker can send crafted requests with traversal sequences to the commits endpoint to read arbitrary files from the underlying GitLab server, outside the intended repository boundary. Depending on server configuration this can expose application settings, secrets, authentication tokens, SSH private keys, and database credentials accessible to the GitLab process. It affects GitLab CE and EE from 18.7 through 19.1.7, 19.2.0 through 19.2.5, and 19.3.0 through 19.3.1. The researcher credited is HackerOne user 's3ntago'.
CVE-2026-87719 (CVSS 3.1: 9.9, AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) is an insecure-deserialization weakness (CWE-502) in the GraphQL subscription serializer, affecting GitLab EE only (self-managed), from 18.3 through 19.1.7, 19.2.0 through 19.2.5, and 19.3.0 through 19.3.1. An authenticated user with access to the Duo Chat feature can submit a specially crafted GraphQL subscription argument to bypass serialization controls and trigger a server-side object lookup, exposing Advanced Search instance configuration and sensitive credentials. The researcher credited is HackerOne user 'kyyblin'.
The same September 10 advisory documents the remaining 16 vulnerabilities in the release across a full severity spread, notably: CVE-2026-88765 (CVSS 8.5, high) — a buffer overflow in a Unicode conversion wrapper reachable during Advanced Search indexing of an imported Git project export, letting an authenticated EE user achieve remote code execution by importing a maliciously crafted export (credited to HackerOne researcher 'joaxcar'; affects EE 12.3 through the same pre-19.3.2/19.2.6/19.1.8 ranges); and CVE-2026-79708 (CVSS 8.5, high) — insufficient scope validation letting an authenticated developer-role EE user execute a policy test pipeline to access protected CI/CD variables outside their intended scope (credited to HackerOne researcher 'yvvdwf'). Both of these, and the remaining medium/low-severity fixes (insecure deserialization-adjacent authorization bugs, GraphQL-complexity denial-of-service issues, XSS, and authorization-bypass flaws), are outside this threat record's declared CVE scope (CVE-2026-85706 and CVE-2026-87719) but are noted as sourced context establishing the breadth of the same patch release.
GitLab.com (SaaS) already runs the patched release and GitLab Dedicated customers require no action; only self-managed CE/EE installations are exposed. As of this research, neither CVE-2026-85706 nor CVE-2026-87719 appears in the CISA Known Exploited Vulnerabilities catalog, and no public proof-of-concept exploit code or in-the-wild exploitation has been confirmed for either flaw — cross-checked explicitly against the unrelated, separately-disclosed GitLab flaw CVE-2026-19478, which WAS actively exploited via watchTowr's honeypot network in August 2026, to avoid conflating the two. The exploitability assessment here is therefore theoretical/disclosed rather than actively exploited, notwithstanding the trivial, single-request nature of the unauthenticated file-read primitive once technical detail becomes public.
MITRE ATT&CK techniques used in TL-2026-2442
Collection
T1005 Data from Local System; T1213 Data from Information Repositories; T1213.003 Data from Information Repositories: Code Repositories
Privilege Escalation
Initial Access
T1190 Exploit Public-Facing Application
Credential Access
T1552 Unsecured Credentials; T1552.001 Unsecured Credentials: Credentials In Files; T1552.004 Unsecured Credentials: Private Keys
Affected products and versions in GitLab Patches Max-Severity Unauthenticated Path Traversal
- GitLab Inc. — GitLab Community Edition (CE)
Vulnerable versions: 18.7-19.1.7 (CVE-2026-85706); 19.2.0-19.2.5; 19.3.0-19.3.1
Fixed in: 19.1.8; 19.2.6; 19.3.2 - GitLab Inc. — GitLab Enterprise Edition (EE)
Vulnerable versions: 18.3-19.1.7 (CVE-2026-87719); 18.7-19.1.7 (CVE-2026-85706); 19.2.0-19.2.5; 19.3.0-19.3.1
Fixed in: 19.1.8; 19.2.6; 19.3.2
Remediation for GitLab Patches Max-Severity Unauthenticated Path Traversal
Patches
- GitLab CE/EE 19.3.2
- GitLab CE/EE 19.2.6
- GitLab CE/EE 19.1.8
Immediate actions
- Upgrade self-managed GitLab CE/EE to 19.3.2, 19.2.6, or 19.1.8 immediately
- Restrict network access to the GitLab instance (VPN/IP allowlist) as a temporary compensating control while patching is scheduled
- Rotate application secrets, authentication tokens, SSH private keys, and database credentials if an internet-facing instance was unpatched and exposed
Workarounds
- Restrict inbound network access to self-managed GitLab instances until patched; GitLab.com and GitLab Dedicated customers require no action
Longer-term hardening
- Subscribe to GitLab security release announcements to track future patch releases
- Restrict GitLab Duo Chat feature access to trusted, need-to-use accounts to reduce the authenticated attack surface for CVE-2026-87719
- Monitor repository commits API and GraphQL subscription endpoints for anomalous or malformed request patterns
- Require review/approval and malware scanning of Git project exports before import to reduce exposure to the related CVE-2026-88765 RCE-via-import vector
CVEs associated with GitLab Patches Max-Severity Unauthenticated Path Traversal
CVE-2026-85706, CVE-2026-87719
Weaknesses (CWE) in GitLab Patches Max-Severity Unauthenticated Path Traversal
CWE-22, CWE-306, CWE-502
Timeline of GitLab Patches Max-Severity Unauthenticated Path Traversal
- GitLab's advisory documents the remaining 16 vulnerabilities in the same release, including CVE-2026-88765 (CVSS 8.5, buffer overflow in a Unicode conversion wrapper during Advanced Search indexing of a malicious Git project import, enabling authenticated RCE, credited to 'joaxcar') and CVE-2026-79708 (CVSS 8.5, policy test pipeline scope-validation bug exposing protected CI/CD variables, credited to 'yvvdwf').
- GitLab confirms GitLab.com (SaaS) is already running the patched release and GitLab Dedicated customers are unaffected; only self-managed CE/EE instances require action.
- GitLab credits HackerOne bug-bounty researchers 's3ntago' (CVE-2026-85706) and 'kyyblin' (CVE-2026-87719) for responsible disclosure.
- GitLab's patch-release documentation publishes full CVSS 3.1 vectors: 10.0 for CVE-2026-85706 and 9.9 for CVE-2026-87719, alongside exact affected version ranges.
- GitLab releases versions 19.3.2, 19.2.6, and 19.1.8 for CE and EE, fixing 18 vulnerabilities including CVE-2026-85706 and CVE-2026-87719.
- Follow-up research explicitly distinguishes this disclosure from the separate, actively-exploited GitLab flaw CVE-2026-19478 (exploited via watchTowr's honeypot network in August 2026); no security vendor has reported in-the-wild exploitation of CVE-2026-85706 or CVE-2026-87719 as of September 11, 2026.
- Research confirms neither CVE-2026-85706 nor CVE-2026-87719 appears in CISA's Known Exploited Vulnerabilities catalog, and no public proof-of-concept exploit code exists for either flaw as of publication.
- cybersecuritynews.com, GBHackers, cyberpress.org, and securityonline.info publish technical breakdowns of the two critical CVEs, also noting the third high-severity RCE flaw (CVE-2026-88765) patched in the same release.
- BleepingComputer reports on the critical patch release, urging self-managed GitLab administrators to upgrade immediately.
Sources cited for GitLab Patches Max-Severity Unauthenticated Path Traversal
- GitLab urges users to patch max-severity path traversal flaw
- GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8
- CVE-2026-85706: GitLab Vulnerabilities Reach CVSS 10.0
- GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution
- Critical GitLab Flaws Let Attackers Read Arbitrary Files, Steal Credentials and Execute Code
- GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution
- GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution
- CISA Known Exploited Vulnerabilities Catalog (queried for CVE-2026-85706 / CVE-2026-87719 — not listed)
- Critical GitLab Flaw Exploited Shortly After Disclosure — CVE-2026-19478, a separate/unrelated GitLab flaw exploited via watchTowr's honeypot network in August 2026, cited to confirm no conflation with this threat's CVEs
More in vulnerability
- CVE-2026-0310: PAN-OS XML Processing Out-of-Bounds Write Enables Unauthenticated Root RCE
- Endor Labs Discloses 14 Critical/High Vulnerabilities Across Seven AI Orchestration Platforms (NocoBase, Flowise, Langflow, Dify, Activepieces, Kestra, Apache Airflow)
- CVE-2025-25249: Fortinet Heap-Based Buffer Overflow Exploited to Deploy PivotC2 RAT on FortiGate Devices
- Tesla Wall Connector Gen 3: Anti-Downgrade (Security Ratchet) Bypass via Charge Port Connector
- Zero-click Pixel 10 exploit chain: VPU driver mmap flaw (CVE-2026-0106) enables arbitrary kernel read/write, chained with Dolby decoder RCE (CVE-2025-54957)
Detection coverage for TL-2026-2442
As of 2026-09-11, Threadlinqs Intelligence publishes 9 detection rule(s) for TL-2026-2442 across Splunk SPL, Microsoft KQL and Sigma, covering 11 indicator(s) of compromise. The whole corpus is readable without an account; a free account unlocks full detection query text in Splunk SPL, Microsoft KQL and Sigma; paid tiers add raw indicator values, correlation and the MCP server. Threadlinqs MCP server · View plans.