# GitLab Patches Max-Severity Unauthenticated Path Traversal Flaw in Repository Commits API (CVE-2026-85706, CVSS 10.0)

> GitLab's September 10, 2026 critical patch release (19.3.2, 19.2.6, 19.1.8) fixes CVE-2026-85706, a maximum-severity (CVSS 10.0) unauthenticated path-traversal flaw in the repository commits API that lets remote attackers read arbitrary files from self-managed GitLab CE/EE servers, and CVE-2026-87719 (CVSS 9.9), an insecure-deserialization bug in the GraphQL subscription serializer that lets an authenticated user with Duo Chat access steal Advanced Search instance configuration and credentials. GitLab.com and GitLab Dedicated are unaffected; neither CVE is listed in CISA's KEV catalog and no public PoC or in-the-wild exploitation has been confirmed for either flaw.

- **Published:** 2026-09-11T00:00:00Z
- **Last reviewed:** 2026-09-14T23:33:19.058Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-2442
- **ID:** TL-2026-2442
- **Severity:** CRITICAL (CVSS 10)
- **Category:** VULNERABILITY
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 48 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-85706, CVE-2026-87719, CVE-2026-88765

## Description

On September 10, 2026, GitLab shipped a critical patch release (versions 19.3.2, 19.2.6, and 19.1.8 for both Community Edition and Enterprise Edition) that fixes 18 vulnerabilities reported through GitLab's HackerOne bug-bounty program, headlined by two critical, unrelated-mechanism flaws.

CVE-2026-85706 (CVSS 3.1: 10.0, AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) is a path-traversal vulnerability in the repository commits API caused by improper path confinement combined with missing authentication enforcement (CWE-22 / CWE-306). It requires no account and no user interaction: an unauthenticated remote attacker can send crafted requests with traversal sequences to the commits endpoint to read arbitrary files from the underlying GitLab server, outside the intended repository boundary. Depending on server configuration this can expose application settings, secrets, authentication tokens, SSH private keys, and database credentials accessible to the GitLab process. It affects GitLab CE and EE from 18.7 through 19.1.7, 19.2.0 through 19.2.5, and 19.3.0 through 19.3.1. The researcher credited is HackerOne user 's3ntago'.

CVE-2026-87719 (CVSS 3.1: 9.9, AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) is an insecure-deserialization weakness (CWE-502) in the GraphQL subscription serializer, affecting GitLab EE only (self-managed), from 18.3 through 19.1.7, 19.2.0 through 19.2.5, and 19.3.0 through 19.3.1. An authenticated user with access to the Duo Chat feature can submit a specially crafted GraphQL subscription argument to bypass serialization controls and trigger a server-side object lookup, exposing Advanced Search instance configuration and sensitive credentials. The researcher credited is HackerOne user 'kyyblin'.

The same September 10 advisory documents the remaining 16 vulnerabilities in the release across a full severity spread, notably: CVE-2026-88765 (CVSS 8.5, high) — a buffer overflow in a Unicode conversion wrapper reachable during Advanced Search indexing of an imported Git project export, letting an authenticated EE user achieve remote code execution by importing a maliciously crafted export (credited to HackerOne researcher 'joaxcar'; affects EE 12.3 through the same pre-19.3.2/19.2.6/19.1.8 ranges); and CVE-2026-79708 (CVSS 8.5, high) — insufficient scope validation letting an authenticated developer-role EE user execute a policy test pipeline to access protected CI/CD variables outside their intended scope (credited to HackerOne researcher 'yvvdwf'). Both of these, and the remaining medium/low-severity fixes (insecure deserialization-adjacent authorization bugs, GraphQL-complexity denial-of-service issues, XSS, and authorization-bypass flaws), are outside this threat record's declared CVE scope (CVE-2026-85706 and CVE-2026-87719) but are noted as sourced context establishing the breadth of the same patch release.

GitLab.com (SaaS) already runs the patched release and GitLab Dedicated customers require no action; only self-managed CE/EE installations are exposed. As of this research, neither CVE-2026-85706 nor CVE-2026-87719 appears in the CISA Known Exploited Vulnerabilities catalog, and no public proof-of-concept exploit code or in-the-wild exploitation has been confirmed for either flaw — cross-checked explicitly against the unrelated, separately-disclosed GitLab flaw CVE-2026-19478, which WAS actively exploited via watchTowr's honeypot network in August 2026, to avoid conflating the two. The exploitability assessment here is therefore theoretical/disclosed rather than actively exploited, notwithstanding the trivial, single-request nature of the unauthenticated file-read primitive once technical detail becomes public.

## MITRE ATT&CK

- T1190 Exploit Public-Facing Application
- T1078 Valid Accounts
- T1552 Unsecured Credentials
- T1552.001 Unsecured Credentials: Credentials In Files
- T1552.004 Unsecured Credentials: Private Keys
- T1005 Data from Local System
- T1213 Data from Information Repositories
- T1213.003 Data from Information Repositories: Code Repositories
- T1595.002 Active Scanning: Vulnerability Scanning
- T1596.005 Search Open Technical Databases: Scan Databases
- T1588.005 Obtain Capabilities: Exploits
- T1211 Exploitation for Defense Evasion
- T1528 Steal Application Access Token
- T1595.001 Active Scanning: Scanning IP Blocks
- T1588.006 Obtain Capabilities: Vulnerabilities
- T1587.004 Develop Capabilities: Exploits
- T1136 Create Account
- T1594 Search Victim-Owned Websites
- T1041 Exfiltration Over C2 Channel

## Sources

- [GitLab urges users to patch max-severity path traversal flaw](https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/)
- [GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8](https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/)
- [CVE-2026-85706: GitLab Vulnerabilities Reach CVSS 10.0](https://securityonline.info/gitlab-vulnerabilities-cve-2026-85706-cvss-10/)
- [GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution](https://cybersecuritynews.com/gitlab-patches-critical-flaws/)
- [Critical GitLab Flaws Let Attackers Read Arbitrary Files, Steal Credentials and Execute Code](https://gbhackers.com/critical-gitlab-flaws/)
- [GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution](https://www.cryptika.com/gitlab-patches-critical-flaws-enabling-arbitrary-file-read-credential-theft-and-remote-code-execution/)
- [GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution](https://cyberpress.org/gitlab-patches-critical-flaws-enabling-arbitrary-file-read-credential-theft-and-remote-code-execution/)
- [CISA Known Exploited Vulnerabilities Catalog (queried for CVE-2026-85706 / CVE-2026-87719 — not listed)](https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)
- [Critical GitLab Flaw Exploited Shortly After Disclosure — CVE-2026-19478, a separate/unrelated GitLab flaw exploited via watchTowr's honeypot network in August 2026, cited to confirm no conflation with this threat's CVEs](https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-2442