GitLab Unauthenticated Path Traversal Attempt Against GitLab Repository Commits API (CVE-2026-85706)

Arnold Chan@slaz

•updated Sep 11, 2026•0•0•4

Detects incoming HTTP requests attempting to exploit a path traversal vulnerability in the GitLab Commits API (CVE-2026-85706). The rule looks for URI patterns containing directory traversal sequences (e.g., ../) targeting the repository commits endpoint.