{
  "id": "CVE-2026-85706",
  "vendor_project": "GitLab",
  "product": "Community Edition and Enterprise Edition",
  "description": "GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.",
  "kev_date_added": "2026-09-11",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}