Exploit / PoCmedium
Add GitLab WorkHorse File Read Auxiliary Module (CVE-2026-85706)
AI summary · glm-5.3Summaries by Vani AI
Metasploit adds a new module to exploit CVE-2026-85706, a file read vulnerability in GitLab WorkHorse.
A new auxiliary module has been added to the Metasploit Framework to exploit CVE-2026-85706, a file read vulnerability in GitLab WorkHorse. The public release of this module provides a ready-to-use tool for security professionals to test for and exploit this flaw.
Key facts
- New Metasploit module added for CVE-2026-85706.
- Module targets GitLab WorkHorse for arbitrary file read.
- Exploit code is now publicly available in the Metasploit Framework.
- CVEs
- CVE-2026-85706
- Vendors
- Rapid7
- Organizations
- Rapid7Metasploit
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85706 | Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE | 10.0 | 97% | KEVPoC ×13 | KEV |
From the original article
By jheysel-r7 · github.com
This source shares headlines only. Summary, key facts and assessment above are AI-written from the article and can be wrong.