Arbitrary Command Execution Vulnerability in GitLab AI Gateway Component
⚠️ CVE-Referenzen:
CVE-2026-90970
Gitlab - Gitlab Ai Gateway - CRITICAL - CVE-2026-90970.
A vulnerability exists in the GitLab AI Gateway component that allows an authenticated user with Duo Agent Platform access to exploit a flaw in the prompt template sandbox. Under specific circumstances, this vulnerability can be triggered using a specially crafted flow configuration, enabling the execution of arbitrary commands on the AI Gateway. This situation poses a significant risk to the integrity and security of the affected systems, highlighting the importance of applying updates and adhering to security best practices.
Quelle: securityvulnerability.io