GitLab has disclosed a maximum-severity vulnerability, CVE-2026-85706, carrying a CVSS score of 10 out of 10. The flaw is a path traversal issue that affects both GitLab Community Edition and Enterprise Edition instances.
Because GitLab is a central tool in many software development pipelines, the vulnerability puts supply chains at risk. An attacker who successfully exploits the path traversal could potentially access files or systems outside intended directories, though the source does not detail specific attack scenarios.
The perfect CVSS score signals that the issue is both easily exploitable and likely to have serious impact. Organizations running either edition of GitLab should treat this as a critical priority, but the source does not include patch information or mitigation steps.