An unauthenticated arbitrary local file read in GitLab CE/EE allows an attacker to read and edit files on the server. It affects the versions 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1.
Stormhield Network Security (SNS) appliance protects you from that attack, thanks to a dedicated IPS Signature. To work efficiently, the traffic needs to be decrypted
| ID | Name |
| http:mix.373 | Exploit attempt of a GitLab file access vulnerability (CVE-2026-85706) |