Tools AI Risk Radar ai-incident-0125
Incident record
GitLab fixes AI gateway command execution
- Severity
- Critical
- Status
- Patched
- Type
- Infra Vuln
- Target
- GitLab AI Gateway
- Actor
- researcher
- CVE
- CVE-2026-90970
What happened
GitLab patched a flaw that let an authenticated Duo Agent Platform user run commands on the AI Gateway server. A malicious flow prompt template could break out of the prompt-template sandbox. The 2 October advisory rates the flaw 9.9 Critical under CVSS 3.1.
Affected releases are 18.1.6 to before 19.2.4, 19.3 to before 19.3.2, and 19.4 to before 19.4.1. The fixes are 19.2.4, 19.3.2 and 19.4.1; GitLab says its hosted gateway was patched.
Sources
- GitLab patch noticedocs.gitlab.com/releases/patches/other-patches/patch-release…
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-90970
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026