CVE-2026-90970
Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
Description
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.
INFO
Published Date :
Oct. 2, 2026, 3:17 p.m.
Last Modified :
Oct. 2, 2026, 6:44 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | CRITICAL | ceab7361-8a18-47b1-92ba-4d7d25f6715a | ||||
| CVSS 3.1 | CRITICAL | MITRE-CVE | ||||
| CVSS 3.1 | CRITICAL | [email protected] |
Solution
- Update GitLab AI Gateway to version 19.2.4 or later.
- Update GitLab AI Gateway to version 19.3.2 or later.
- Update GitLab AI Gateway to version 19.4.1 or later.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-90970.
| URL | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/work_items/628842 |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-90970 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-90970
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-90970 vulnerability anywhere in the article.
-
The Hacker News
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has re ... Read more
-
TheCyberThrone
CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access
Executive SummaryAtlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Center products.The vulnerability carries a CVSS v4.0 score of ... Read more
-
TheCyberThrone
Microsoft Releases Out-of-Band Exchange Security Update
October 6, 2026Executive SummaryMicrosoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authent ... Read more
-
TheCyberThrone
CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild
A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication and can cause ... Read more
-
TheCyberThrone
CVE-2026-90970: Critical GitLab AI Gateway Vulnerability
October 3, 2026AI infrastructure is quickly becoming part of the enterprise attack surface, and CVE-2026-90970 is a good example of why.Zero-Day Vulnerability ReportsThe vulnerability affects GitLab A ... Read more
-
The Hacker News
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the se ... Read more
The following table lists the changes that have been made to the
CVE-2026-90970 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Oct. 02, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-90970', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2026-10-02T16:47:45.638880Z'} -
New CVE Received by [email protected]
Oct. 02, 2026
Action Type Old Value New Value Added Description GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway. Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Added CWE CWE-1336 Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/90xxx/CVE-2026-90970.json">CVE-2026-90970</a> Added Reference https://gitlab.com/gitlab-org/gitlab/-/work_items/628842