GitLab Duo (Product): news timeline & CVEs

Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacksnew

GitLab patched CVE-2026-90970, a CVSS 9.9 flaw letting authenticated Duo users execute commands on self-hosted AI Gateways.

GitLab patched CVE-2026-90970, a CVSS 9.9 flaw in self-hosted AI Gateway deployments used for GitLab Duo. An authenticated user with Duo Agent Platform access can submit a crafted flow configuration that escapes the prompt-template sandbox and executes arbitrary commands on the gateway. Affected builds start at 18.1.6 and run through releases before 19.2.4, 19.3.2, and 19.4.1. GitLab-hosted gateways are already fixed, and the advisory reports neither a public exploit nor active exploitation.

Cyber Security News04:11 UTC · 18m agoVulnerability 4 sources CVE-2026-90970

GitLab warns of critical RCE vulnerability in AI Gateway service

GitLab urges immediate patches for critical AI Gateway RCE CVE-2026-90970 on self-hosted instances.

GitLab warned that CVE-2026-90970, an improper neutralization flaw in the AI Gateway, lets an authenticated user with Duo Agent Platform access escape the prompt-template sandbox through a crafted flow configuration and run arbitrary commands. Fixes are in versions 19.2.4, 19.3.2, and 19.4.1 for self-hosted gateways; GitLab-hosted gateways are already protected. The report also notes last month's unauthenticated path traversal CVE-2026-85706 in GitLab CE and EE, which CISA added to its exploited-vulnerability catalog under BOD 26-04.

BleepingComputerupdated 04:11 UTC · 18m agofirst Oct 2, 16:20 UTC · 12h agoVulnerability in the wild 4 sources CVE-2026-90970 CVE-2026-85706

Critical GitLab Bugs Let Attackers Execute Code Through Malicious CI/CD Regex

GitLab patched two CVSS 9.9 flaws letting authenticated users execute code via malicious CI/CD regular expressions.

GitLab released emergency patches for two critical flaws, CVE-2026-89078 and CVE-2026-93577, both scored CVSS 9.9. An authenticated user can place a crafted regular expression in a CI/CD configuration to trigger a double-free or an integer overflow and potentially execute code on the GitLab server. Affected releases are GitLab CE and EE 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1. The update also fixes high-severity XSS CVE-2026-84739 and authorization flaw CVE-2026-92470 in GitLab Duo AI job troubleshooting.

Cyber Security NewsSep 25, 09:51 UTC · 7d agoVulnerability CVE-2026-89078 CVE-2026-93577 CVE-2026-84739+1 CVEs2· 2 reads

GitLab Duo

Timeline3 articles

Related CVEsby mentions

Appears with

Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacksnew

GitLab warns of critical RCE vulnerability in AI Gateway service

Critical GitLab Bugs Let Attackers Execute Code Through Malicious CI/CD Regex