Topic

Cve 2026 90970

Coverage tagged cve 2026 90970.

Articles: 1
Desk: 1

Data graphic: GitLab AI Gateway sandbox escape, CVE-2026-90970, rated CVSS 9.9 Critical. Fixed in 19.2.4, 19.3.2 and 19.4.1 for self-hosted gateways; the attacker must be a logged-in Duo Agent Platform user; no exploitation reported and not in KEV.

highAI Security Cve 2026 90970

GitLab AI Gateway Flaw CVE-2026-90970 Lets Duo Agent Users Run Commands on Self-Hosted Gateways

GitLab fixed a CVSS 9.9 prompt-template sandbox escape in its AI Gateway. Self-hosted gateways must move to 19.2.4, 19.3.2 or 19.4.1.

Oct 2 · 7 min