All vulnerabilities
CVE-2026-90970

Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

GitLab GitLab AI GatewayNetwork & edge
Open in ThreatlineRecord JSON
CVSS
9.9Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.94%Chance of exploitation activity in the next 30 days, higher than 60% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in19.2.4Also 19.3.2, 19.4.1CVE List
Published2 Oct 2026Updated 2 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

Text from CVE List

Affected versions 3

  • GitLab AI Gatewayaffected: 18.1.6 before 19.2.4CVE List
  • GitLab AI Gatewayaffected: 19.3 before 19.3.2CVE List
  • GitLab AI Gatewayaffected: 19.4 before 19.4.1CVE List

References 1