Arbitrary Command Execution Vulnerability in GitLab AI Gateway Component

⚠️ CVE-Referenzen: CVE-2026-90970
Gitlab - Gitlab Ai Gateway - CRITICAL - CVE-2026-90970. A vulnerability exists in the GitLab AI Gateway component that allows an authenticated user with Duo Agent Platform access to exploit a flaw in the prompt template sandbox. Under specific circumstances, this vulnerability can be triggered using a specially crafted flow configuration, enabling the execution of arbitrary commands on the AI Gateway. This situation poses a significant risk to the integrity and security of the affected systems, highlighting the importance of applying updates and adhering to security best practices.
Quelle: securityvulnerability.io