Critical severity · published Oct 2, 2026
CVE-2026-90970
Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
9.9
CVSS
17.5%
EPSS
No
On KEV
Description
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)17.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
GitLab AI Gateway · GitLab
18.1.6 before 19.2.4; 19.3 before 19.3.2; 19.4 before 19.4.1 · source: vendor
In the news
VulnerabilityCritical
Security Affairs newsletter Round 598 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Fake Zoom installer hides macOS backdoor CloudSyncD CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed Antino Backdoor Lets […]
Oct 4, 2026·Security Affairs
VulnerabilityCritical
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab has released patches for a critical vulnerability in its AI Gateway, tracked as CVE-2026-90970 (CVSS score of 9.9), that could allow an authenticated user with access to the Duo Agent Platform to […]
Oct 3, 2026·Security Affairs
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-90970
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-90970
gitlab.com
https://gitlab.com/gitlab-org/gitlab/-/work_items/628842
More from GitLab AI Gateway
9.6
CVE-2026-75871
Server-Side Request Forgery (SSRF) in GitLab AI Gateway
8.2
CVE-2026-19889
Server-Side Request Forgery (SSRF) in GitLab AI Gateway