SecurityThe Hacker Newsabout 1 hour ago
GitLab Patches Critical 9.9 AI Gateway Flaw
4 min read
GitLab disclosed CVE-2026-90970 on October 2, a critical 9.9-rated flaw in its AI Gateway that lets a logged-in user with Duo Agent Platform access escape the prompt template sandbox and run commands on the gateway. Self-hosted gateway operators must update to versions 19.2.4, 19.3.2, or 19.4.1; GitLab-hosted gateways are already fixed.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitLab
