GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
ID: 565a63d0-7530-5a56-a637-5acfbb7d7421
STIX ID: report--565a63d0-7530-5a56-a637-5acfbb7d7421
Feed Name: The Hacker News
Threat Score
GitLab disclosed a critical vulnerability (CVE-2026-90970, CVSS 9.9) in its AI Gateway prompt template for custom flows that could allow a logged-in user with Duo Agent Platform access to escape the template sandbox and execute arbitrary commands on self‑hosted gateways; fixed gateway releases are 19.2.4, 19.3.2, and 19.4.1 and GitLab urges immediate updates for self-hosted deployments while stating GitLab-hosted gateways have been remediated.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.