GitLab Vulnerability Actively Exploited to Exfiltrate Data

AI summary

CVE-2026-85706 is a critical path-traversal flaw in self-managed GitLab CE/EE that allows an unauthenticated remote attacker to read arbitrary files. The issue has moved from theoretical risk to confirmed active exploitation, increasing urgency for affected organizations to patch and review exposure.