CVE-2021-22205Used in ransomware
GitLab Community and Enterprise Editions
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
What it is
GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other GitLab entries on the list
- Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CVE-2026-97229 · Oct 29, 2026
- Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability CVE-2026-85706 · Sep 11, 2026
- GitLab GitLab Server-Side Request Forgery (SSRF) Vulnerability CVE-2021-22175 · Feb 18, 2026
- Community and Enterprise Editions GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability CVE-2021-39935 · Feb 3, 2026
- GitLab CE/EE GitLab Community and Enterprise Editions Improper Access Control Vulnerability CVE-2023-7028 · May 1, 2024