GitLab CVE-2026-85706 disclosure, exploitation and public exploit release

A cluster of three linked events around GitLab path traversal vulnerability CVE-2026-85706: the vulnerability was publicly disclosed, active exploitation was confirmed and tracked in CISA KEV, and an exploit was publicly released. The sequence describes a vulnerability-to-exploitation lifecycle rather than a regulatory, market or military event.