yes, but sublicensing to even permissive ("free-er") license (GPLv3+ to Apache2.0) is a violation of license.
GPL is supposed to viral, if you are using project adopted that, you are taking the risk with it.
If you are just changing the license and took the code, that's wrong and need to get an attention. If anyone could go just yoink and relicense the GPL code to other permissive license was "legal", the https://gpl-violations.org wouldn't exist in the first place (i.e. you can just take the linux kernel code and rename it something like "mynux", redistribute in bsd-3 clause and "don't distribute the derivative part").