gitlab articles — AI Newsroom

GitLab patches a 9.9 RCE in its self-hosted AI Gateway

Oct 11, 2026·4 min read·7 sources

gitlab cve-2026-90970 ai-gateway duo-agent-platform rce+2+3

A critical prompt-template sandbox escape lets an authenticated Duo user run commands on self-hosted GitLab AI Gateways. Patch to 19.2.4, 19.3.2, or 19.4.1.