Warning: Critical Path Traversal in GitLab CE/EE, Patch Immediately!

**GitLab CVE-2026-85706 — arbitrary file read (Info Disclosure):** GitLab CE/EE versions across 18.7–19.3.1 contain a vulnerability in the repository commits API that permits unauthenticated arbitrary file access, potentially exposing credentials and configuration; in-the-wild probes were observed and CISA added the issue to its Known Exploited Vulnerabilities list. The vendor and Centre for Cybersecurity Belgium recommend urgent patching, enhanced monitoring/detection, and rotating any exposed secrets.