LOCAL EXPLOIT GitLab commits API file.path targeting secrets file (CVE-2026-85706)

Ali AlEnezi@site

•updated 22 days ago•0•0•12

Detects attempts to exploit the GitLab commits API via path traversal or direct file path manipulation to access sensitive configuration files or system secrets, such as gitlab-secrets.json, database.yml, or system files like /etc/passwd.