Product
GitLab Workhorse
- First Reported
- Sep 17, 2026
- Latest Reported
- Sep 17, 2026
Reported Context (1)
- handles multipart file uploads, which the repository commits API exposes to unauthenticated callers. GitLab Workhorse buffers an uploaded request body to disk and hands Rails a set of generated parameters pointing at Critical GitLab File-Read Flaw CVE-2026-85706 Exploited; Patch Self-Managed Instances
CVE (1)
MITRE ATT&CK (1)
Vendors (1)
Products (1)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.