GitLab has released patches for a critical vulnerability in its AI Gateway that could allow authenticated users with Duo Agent Platform access to execute arbitrary commands on self-hosted gateways. The flaw, identified as CVE-2026-90970 with a severity score of 9.9, involves a prompt template sandbox escape through specially crafted flow configurations. Fixed versions include 19.2.4, 19.3.2, and 19.4.1. Users of GitLab.com, GitLab Dedicated, and those relying on GitLab-hosted gateways are not affected, but organizations operating self-hosted gateways must update immediately.
The vulnerability affects AI Gateway versions from 18.1.6 through 19.4 prior to the patched releases. GitLab disclosed the flaw on October 2 and notified affected customers before publishing the advisory. No public evidence of active exploitation has been reported. Self-hosted gateway administrators can update their Docker or Helm deployments using the new image tags. The company provided no workaround for systems unable to update immediately or method to detect prior attacks. HackerOne researcher invisiblemeerkat reported the vulnerability.
Source: Read the full story at The Hacker News
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
