// GitHubCRITICAL
GitLab disclosed CVE-2026-90970, a critical remote code execution vulnerability in self-hosted AI Gateway affecting versions 18.1.6 through 19.4.0. An authenticated attacker with Duo Agent Platform access can craft a malicious flow configuration to escape the prompt template sandbox and execute arbitrary commands on the AI Gateway host. CVSS score 9.9. GitLab released patched versions 19.2.4, 19.3.2, and 19.4.1 and recommends immediate upgrade for self-hosted deployments; cloud-hosted gateways are already patched.
- Critical GitLab AI Gateway Flaw Lets Attackers Execute Arbitrary(opens in a new tab)
- GitLab warns of critical RCE vulnerability in AI Gateway service(opens in a new tab)
- Critical GitLab AI Gateway Vulnerability Enables Remote Code Exe(opens in a new tab)
// Get alerts for GitHub