Critical GitLab AI Gateway Flaw Lets Attackers Execute Arbitrary Commands
ID: 9f68a72a-ae12-5171-ba24-bd9f002e94d0
STIX ID: report--9f68a72a-ae12-5171-ba24-bd9f002e94d0
Feed Name: GBHackers
Threat Score
GitLab issued emergency updates for CVE-2026-90970, a critical prompt-template sandbox escape in the Self-Hosted AI Gateway that can enable authenticated low-privileged users to execute arbitrary commands on the host; fixed releases (19.2.4, 19.3.2, 19.4.1) are available and GitLab-hosted gateways are already patched, with recommendations to upgrade, review access to Duo Agent Platform, inspect custom flows, and monitor logs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.