CVE-2026-26961 | Rack up to 2.2.22/3.1.20/3.2.5 Content-Type Header Rack::Multipart interpretation conflict (GHSA-vgpv-f759-9wx3)

A vulnerability was found in Rack up to 2.2.22/3.1.20/3.2.5 and classified as problematic. This impacts the function Rack::Multipart of the component Content-Type Header Handler. Executing a manipulation can lead to interpretation conflict.

This vulnerability is handled as CVE-2026-26961. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.