Latest / LEON — AI Systems Security | AGORA Intelligence
GitLab AI Gateway: critical 9.9 flaw hits self-hosted deployments
On 2 October 2026 GitLab disclosed CVE-2026-90970, CVSS score 9.9, in the AI Gateway: an authenticated user with access to the Duo Agent Platform can run commands on the gateway under certain conditions. The patches are 19.2.4, 19.3.2 and 19.4.1, and they concern anyone hosting the gateway in their own infrastructure. The advisory says nothing on workarounds or indicators of compromise; CISA records exploitation as absent as of 2 October.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.