CVE-2026-85706 | GitLab up to 19.1.7/19.2.5/19.3.1 Repository Commits API missing authentication

September 12, 2026 Yanac

A vulnerability was found in GitLab up to 19.1.7/19.2.5/19.3.1. It has been rated as problematic. The impacted element is an unknown function of the component Repository Commits API. The manipulation leads to missing authentication.

This vulnerability is referenced as CVE-2026-85706. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More