URL has been copied successfully!
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed


Tags: , , , , ,

GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab has released patches for a critical vulnerability in its AI Gateway, tracked as CVE-2026-90970 (CVSS score of 9.9), that could allow an authenticated user with access to the Duo Agent Platform to […]

First seen on securityaffairs.com

Jump to article: securityaffairs.com/200283/hacking/cve-2026-90970-critical-gitlab-ai-gateway-flaw-fixed.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. ‘Dangerous’ vulnerability in GitLab Ultimate Enterprise Edition
  2. ‘Trivial’ exploit can give attackers root access to Linux kernel
  3. CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
  4. Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework