CriticalCVE
GitLab warns of critical RCE vulnerability in AI Gateway service
BleepingComputer·Source published ·1 min read
What happened?
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]
Key details
- Authenticated users with Duo Agent Platform access can escape the prompt template sandbox.
- Exploitation leads to arbitrary command execution on the AI Gateway host.
- GitLab-hosted AI Gateway instances are already protected and require no customer action.
- Self-hosted AI Gateway users must upgrade to patched versions immediately.
- GitLab conducted targeted outreach to self-hosted AI Gateway customers before public disclosure.
- Last month GitLab also fixed a maximum severity path traversal flaw CVE-2026-85706 in CE and EE.
Affected
- GitLab Self-Hosted AI Gateway deployments on Self-Managed instances.
- GitLab Self-Managed customers running self-hosted AI Gateway.
Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.