CVE-2026-90970 | defend.network

What is CVE-2026-90970?

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

CVSS9.9 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWECWE-1336

NVD published2026-10-02

NVD last modified2026-10-02

Timeline

2026-10-02Published to the U.S. National Vulnerability Database (NVD)
2026-10-03First covered in a defend.network daily briefing

Affected product

See advisory

References

Referenced in our briefings & reports

Critical RCEs in GitLab, Dell CSM, SharePoint; Warlock ransomware escalates (2026-10-03)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.

What is CVE-2026-90970?

Timeline

Affected product

References

Referenced in our briefings & reports

Get Critical CVE Alerts