Skip to main content
Apexward Pulse
3 reportsPriority Medium

GitLab vulnerability disclosures

Multiple critical vulnerabilities have been disclosed in GitLab Community Edition and Enterprise Edition, with reports of active exploitation. UK organisations using these platforms need to assess their risk and apply updates promptly.

First report Latest

What is going on

  • GitLab released updated versions to address two critical path traversal vulnerabilities, CVE-2026-85706 and CVE-2026-87719, which were initially patched in September 2026.
  • A separate integer overflow vulnerability, CVE-2026-97229, was disclosed in October 2026 affecting merge request pages when the Ona integration is enabled.
  • Known-exploited catalogue reports indicate these vulnerabilities have been actively exploited in the wild.
  • No specific details about the impact on UK organisations have been reported yet.
  • What to watch: Further confirmation of exploitation attempts targeting UK organisations using affected GitLab versions.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed