GitLab urges users to patch maximum-severity path traversal flaw

GitLab urged users to immediately patch the maximum-severity path traversal vulnerability CVE-2026-85706. Under certain conditions, unauthenticated attackers can read arbitrary data from vulnerable servers, including credentials, secrets, and sensitive information.