Aviatrix Threat Research Center@aviatrixtrc
Active Exploitation
TRC analysis shows attackers exploiting CVE-2024-5655, a path traversal vulnerability in GitLab's commit interface, to read arbitrary server files without authentication. Following initial compromise, attackers extract credentials and SSH keys to pivot through connected development infrastructure. Runtime segmentation helps contain post-compromise lateral movement through CI/CD pipelines. #DevSecOps #ZeroTrust 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/gitlab-cve-2026-85706-path-traversal-probes
Post summary
Attackers are actively exploiting CVE-2024-5655 to read arbitrary server files and pivot through development infrastructure, confirming the vulnerabilities is being used in the wild.
0000056
2.0K followersView on X