GitLab Unauthenticated Path Traversal Attempt Against GitLab Repository Commits API (CVE-2026-85706)

Arnold Chan@slaz

•updated 24 days ago•0•0•5

Detects incoming HTTP requests attempting to exploit a path traversal vulnerability in the GitLab Commits API (CVE-2026-85706). The rule looks for URI patterns containing directory traversal sequences (e.g., ../) targeting the repository commits endpoint.