Live › vulnerability › CVE-2021-22205
Go to dashboardGitLab CE and EE accept image uploads through GitLab Workhorse, which passes them to ExifTool, and ExifTool does not validate the files properly. An unauthenticated attacker can upload a crafted image and run code on the GitLab server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| GitLab Community and Enterprise Editions | vendor | – | – |
Check the GitLab version installed on the instance, e.g. with gitlab-rake gitlab:env:info or the version shown in the admin area, and compare it to the fixed versions in the vendor advisory.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2021-22205")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.