CISA Issues Warning on Actively Exploited Critical GitLab Vulnerability

CISA has added a critical GitLab vulnerability, CVE-2026-85706, to its Known Exploited Vulnerabilities catalog, confirming active exploitation. This flaw, rated 10.0 CVSS, allows unauthenticated attackers to read arbitrary files from GitLab servers due to improper path confinement. The vulnerability poses significant risks to source code and CI/CD secrets, with federal agencies mandated to remediate affected systems by September 14, 2026.