Aviatrix Threat Research Center@aviatrixtrc
Active Exploitation
Attackers exploited CVE-2024-6385, a maximum-severity GitLab path traversal flaw, to extract CI/CD secrets and SSH keys without authentication. TRC analysis shows rapid escalation from initial probes to full development infrastructure compromise. Runtime segmentation helps limit blast radius when development platforms are breached. #SupplyChainSecurity 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/gitlab-cve-2026-85706-maximum-severity-supply-chain-risk
Post summary
The text reports active real-world exploitation of a GitLab path traversal vulnerability and describes the impact as compromise of development infrastructure. It does not provide a PoC, named exploit tool, patch, or debunking claim.
0000066
2.0K followersView on X