CVE-2026-90970: GitLab AI Gateway RCE

Reported by SOCRadar (ameer)

Summary by Cyber Security News5 Oct 2026, 15:03 CET

About this summary. This is a short excerpt from the description that SOCRadar published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/cve-2026-90970-gitlab-ai-gateway-rce/

CVE-2026-90970: GitLab AI Gateway RCE GitLab has patched CVE-2026-90970, a critical vulnerability in the Self-Hosted AI Gateway that can allow an authenticated user with Duo Agent Platform access to execute arbitrary commands on the gateway. The flaw carries a CVSS 3.1 score of 9.9. GitLab strongly recommends that affected Self-Hosted AI Gateway customers upgrade to 19.2.4, 19.3.2, or 19.4.1 as soon as possible.

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.