Atlassian patches arbitrary file access flaw CVE-2026-21589

Atlassian released patches on October 5th for an arbitrary file access vulnerability (CVE-2026-21589) affecting multiple products. The flaw allows attackers to read arbitrary files in the web application's directory, potentially exposing sensitive configuration data. Exploitation could lead to credential disclosure and further compromise; organizations should prioritize patching.