Patchfirst
Patchfirst
CVE-2026-90970 Public exploit Critical · 9.9 EPSS 17.5%

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from…

GitLab · GitLab AI Gateway

Summary

A flaw in the GitLab AI Gateway component of GitLab's AI Gateway product allowed a crafted flow configuration to escape the prompt template sandbox, under certain conditions. An attacker who is an authenticated user with Duo Agent Platform access, and who can submit a specially crafted flow configuration, could execute arbitrary commands on the AI Gateway.

Official description · NVD

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

Breakdown
33.7 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Public exploit code (PoC-in-GitHub) appeared 1 day after disclosure. No confirmed exploitation is recorded.

  1. Disclosedday 0
  2. Public exploit codePoC-in-GitHub+1 day

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 10 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Other 1

gitlab.com/gitlab-org/gitlab/-/work_items/628842
↑ ↓ chooseEnter openEsc close