GitLab Patches Critical AI Gateway Vulnerability Allowing Unauthorized Server Command Execution
Sign in✓ Signed in
GitLab has released patches for a critical remote code execution flaw in its self-hosted AI Gateway service that could allow authenticated users to escape the Duo Agent platform's prompt template sandbox and execute arbitrary commands on underlying servers. The vulnerability, tracked as CVE-2026-90970, carries a CVSS severity score of 9.9 out of 10 and was disclosed on October 2, 2026.
Continue reading
The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in✓ Signed in — this article isn’t included in your current plan.
Unlocking the full article...