TECH NEWS

Perfect-10 GitLab bug under attack days after patch lands

https://image.theregister.com/5279434.jpg?imageId=5279434&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers

CISA says attackers are exploiting a maximum-severity GitLab flaw that lets unauthenticated miscreants read arbitrary files from vulnerable servers after the code shack released fixes on September 10.

The US Cybersecurity and Infrastructure Security Agency has added CVE-2026-85706 to its Known Exploited Vulnerabilities catalog.

The vulnerability is a path traversal bug in the repository commits API affecting GitLab Community Edition and Enterprise Edition. GitLab rates it a perfect 10.0, the maximum score on the CVSS v3.1 severity scale.

Under certain conditions, an attacker doesn't need to log in before abusing the flaw to read arbitrary files from the GitLab server. GitLab blamed the problem on improper path confinement combined with missing authentication enforcement in the affected API.

That's not an especially comforting combination on a platform that can be stuffed with source code, configuration files, and credentials.

GitLab...

Copyright of this story solely belongs to www.theregister.com. To see the full text click HERE

Read more