LIVE · cybersecurity feed
Live wire
CVE-2026-88779 · Citrix NetScaler Flaw Exploited Before CVE PublicationCVE-2026-88779 · NetScaler CVE-2026-88779 Exploited Before PublicationCVE-2022-28368 · dompdf_project dompdf XSS flaw added to VulnCheck KEVCVE-2026-88771 · Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploitedWarlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical InfrastructureShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group MembersChina-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM PhishingCVE-2026-7273 · Zyxel GS1900 Switch Flaw Exploited, Now in EU CatalogueCVE-2026-102489 · Zammad Session Fixation Vulnerability Exploited Same Day as DisclosureCVE-2026-102490 · Zammad GmbH Zammad Vulnerability Exploited Same Day as Publication
vulnerabilitycritical

GitLab warns of critical RCE vulnerability in AI Gateway service

GitLab has issued an urgent warning to customers regarding a critical remote code execution (RCE) vulnerability, identified as CVE-2026-90970, affecting its AI Gateway service. The flaw could allow attackers to execute arbitrary commands on vulnerable self-hosted instances.

ZeroDay News ·

Source: BleepingComputer

GitLab has issued an urgent warning to customers regarding a critical remote code execution (RCE) vulnerability, identified as CVE-2026-90970, affecting its AI Gateway service. The flaw could allow attackers to execute arbitrary commands on vulnerable self-hosted instances.

The AI Gateway is a component that provides access to GitLab Duo's AI-native features. While GitLab operates its own cloud-based AI Gateway for GitLab.com, GitLab Self-Managed, and GitLab Dedicated, users also have the option to deploy self-hosted instances on GitLab Self-Managed through GitLab Duo Self-Hosted.

The vulnerability stems from an improper neutralization weakness. An authenticated user with basic privileges and Duo Agent Platform access could exploit this flaw by crafting a special flow configuration to escape the prompt template sandbox, leading to arbitrary command execution on the AI Gateway.

GitLab has released patched versions 19.2.4, 19.3.2, and 19.4.1 to address CVE-2026-90970 for users of self-hosted AI Gateway installations. The company strongly recommends that all GitLab Self-Managed customers with self-hosted AI Gateway installations update to one of these versions immediately. Customers utilizing a GitLab-hosted AI Gateway are already protected and do not need to take any action. GitLab confirmed that it conducted targeted outreach to self-hosted AI Gateway customers prior to the public disclosure of the vulnerability.

This alert follows a recent patch for a maximum severity path traversal vulnerability, CVE-2026-85706, in GitLab Community Edition (CE) and Enterprise Edition (EE). That flaw allowed unauthenticated attackers to read sensitive data, including credentials and other secrets, from vulnerable servers. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) subsequently added CVE-2026-85706 to its catalog of actively exploited vulnerabilities, mandating federal agencies to secure their systems within three days.

Since November 2021, CISA has identified five GitLab vulnerabilities that have been exploited in the wild, with one instance linked to ransomware attacks. GitLab's DevSecOps platform serves over 30 million registered users, including more than 50% of Fortune 100 companies.

vulnerabilitypatchai
ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Google halts open-source bug bounty program amid AI spam surge

Google has temporarily suspended submissions for product vulnerabilities to its Open Source Software Vulnerability Rewards Program (OSS VRP), effective October 1, 2026. The company cited a significant increase in automated submissions, most of which were deemed invalid, as the reason for the pause.

vulnerability

AI slop submissions force Google to freeze its open-source bug bounty

Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) for new product vulnerability submissions, effective October 1, 2026. The company cited a substantial increase in automated, AI-generated reports, most of which were invalid, as the reason for the pause. This influx of low-quality submissions overwhelmed the engineers and open-source maintainers…

breach

Frontline Education Breach Impacts K-12 School District Staff

Frontline Education, a prominent software provider for K-12 school districts in the United States, has confirmed a data breach that exposed the personal information of school staff. The incident, which was discovered on August 14, 2026, stemmed from a vulnerability in a third-party software product utilized by the company.

ai

Apple tightens macOS disk access as AI agents become more powerful

Apple is implementing stricter controls for Full Disk Access in macOS, citing an increased risk to user privacy from increasingly capable and autonomous AI agents. The company indicated that future macOS versions will require users to take explicit steps to grant applications this permission. A specific rollout date and the precise mechanics of these new controls have not yet been detailed.

nation-state

doxx.net opens Agentic Defined Networking public beta, raises $38 million

doxx.net has launched the public beta of its Agentic Defined Networking (ADN) platform, which enables users and their AI agents to establish private, secure networks and communicate without intermediary servers. The company also announced it has secured $38 million in Series A funding, led by Andreessen Horowitz, with additional participation from Animo Ventures and Focal.vc. As part of the…

nation-state

Another OpenAI Safety Expert Quits and Raises New AI Safety Concerns

David Robinson, a veteran safety expert at OpenAI, has resigned from the company, citing concerns about its culture and rapid AI development model. Robinson, who was instrumental in authoring safety reports accompanying major product launches during his three-and-a-half-year tenure, stated that he believes the company's current trajectory is unacceptable.