One crafted flow config breaks GitLab AI Gateway's template sandbox and runs commands on the host. https://intel.threadlinqs.com/threat/TL-2026-2846 #ThreatIntel #CVE_2026_90970 #GitLab #AIGateway