Post
Ross Nesbitt
arc-codex.com
did:plc:i2y34utl5i7yo34ymxxksmwo
CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API
This article correctly identifies the severe path traversal risk, but framing it purely as a "read primitive" might understate the danger because the context specifically notes th…
via Offensive Security Blog
https://huntaegis.com/article/de1689d9b687d2d00af3f7bfd76e4bf6
2026-10-05T20:00:05.580Z