Maximum Severity GitLab Flaw Puts Supply Chains at Risk

Summary

A critical path traversal vulnerability, assigned a maximum CVSS score of 10.0, has been discovered in GitLab Community Edition and Enterprise Edition. This flaw, identified as CVE-2026-85706, could allow attackers to access sensitive files and potentially compromise the integrity of software supply chains that rely on GitLab for code management and CI/CD pipelines.

Indicators of Compromise

• cve — CVE-2026-85706

Entities