ACTIVELY EXPLOITED
CVE-2021-22205: GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
| Vendor | GitLab |
|---|---|
| Product | Community and Enterprise Editions |
| Actively exploited | Yes |
| Added to CISA KEV | 3 Nov 2021 |
| CISA federal deadline | 17 Nov 2021 |
| Ransomware use | Known |
| Weakness (CWE) | CWE-20, CWE-95 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.
SOURCES
Other GitLab flaws
- CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
- CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
- CVE-2021-22175: GitLab Server-Side Request Forgery (SSRF) Vulnerability
- CVE-2021-39935: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
- CVE-2023-7028: GitLab Community and Enterprise Editions Improper Access Control Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.