Search/CVE-2026-90970
● CVE — Critical

CVE-2026-90970

DiscoveredOct 2, 2026UpdatedOct 2, 2026

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

View graph Watch Export
CVSS v3.1
9.9 CRITICAL
EPSS
0.94%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
5
sources referencing this CVE
Related IOCs
1
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Connections
7 relationships
Timeline
disclosure → media coverage
Oct 2, 2026
Disclosure — published as a CVE record.
Oct 2, 2026
bleepingcomputer.com reports: GitLab warns of critical RCE vulnerability in AI Gateway service
Oct 2, 2026
thehackernews.com reports: GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
Oct 5, 2026
redhotcyber.com reports: GitLab risolve un bug da 9,9 su 10 in AI Gateway: ecco cosa devi sapere
Oct 5, 2026
research.checkpoint.com reports: 5th October – Threat Intelligence Report
Oct 5, 2026
thehackernews.com reports: ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
Public PoC (1)
github.com/techupdate24/gitlab-ai-gateway-cve-2026-90970
Unverified third-party code — review before executing.