A GitLab flaw could let a user with the required account and access make its AI Gateway run commands, under specific conditions.

The fix is…

https://en.hacks.gr/i-gitlab-diorthonei-sovaro-provlima-poy-epetrepe-se-christi-me-prosvasi-na-ektelei-entoles-sto-ai-gateway/

#GitLab #GitLabDuo #AIGateway

GitLab AI Gateway vulnerability CVE-2026-90970 (CVSS 9.9) lets Duo Agent Platform users run commands. Upgrade self-hosted gateways now.

#GitLab #AIGateway #GitLabDuo #CVE202690970 #RCE #DevSecOps #Vulnerability