Cybersecurity Business & Enterprise4 min reading time

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

The Hacker NewsPublished 24 days ago

GitLab patched a critical vulnerability (CVE-2026-90970) in its AI Gateway that allowed command execution by logged-in users with Duo Agent Platform access on self-hosted servers. The flaw affects gateway versions before 19.2.4, 19.3.2, and 19.4.1, and GitLab urges immediate updates for self-hosted instances.

#application-security #cve-2026-90970 #gitlab

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

More in Cybersecurity

Cybercrime ring busted over AI-powered data theft targeting hospitals, businesses

PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity

Anthropic's Claude bypassed a paywall to access Georgia voter data without authorization