LOCAL EXPLOIT GitLab commits API file.path targeting secrets file (CVE-2026-85706)

Ali AlEnezi@site

•updated Sep 14, 2026•0•0•12

Detects attempts to exploit the GitLab commits API via path traversal or direct file path manipulation to access sensitive configuration files or system secrets, such as gitlab-secrets.json, database.yml, or system files like /etc/passwd.