【Vulnerability Alert】GitLab AI Gateway Has a High-Risk Security Vulnerability (CVE-2026-90970). Please Verify and Take Action as Soon as Possible
publish date :
2026-10-22
update date :
2026-10-22
Source: Ministry of education information & communication security contingency platform
| Publication Number | Publication Time | ||
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-19 15:57:38 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】GitLab AI Gateway Has a High-Risk Security Vulnerability (CVE-2026-90970). Please Verify and Take Action as Soon as Possible |
|||
| [Content] Forwarded from the National Institute of Cyber Security Cybersecurity Alert NISAC-200-202610-00000011 Researchers have discovered a Sandbox Escape vulnerability (CVE-2026-90970) in GitLab AI Gateway. An authenticated remote attacker with permissions to configure workflows and templates for the Duo Agent Platform can submit specially crafted prompt templates to escape the restrictions of the prompt template sandbox, thereby executing arbitrary commands on the AI Gateway. Please verify and take action as soon as possible. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] GitLab AI Gateway versions 18.1.6 through versions earlier than 19.2.4 (excluding 19.2.4), versions 19.3.0 through versions earlier than 19.3.2 (excluding 19.3.2), and versions 19.4.0 through versions earlier than 19.4.1 (excluding 19.4.1) |
|||
| [Recommended Actions] The vendor has released patches or updates to address this vulnerability. Please refer to the official instructions for remediation. The URL is as follows: https://docs.gitlab.com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/ |
|||
|
[Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2026-90970 |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center