Git Lab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
GitLab disclosed CVE-2026-90970 on October 2, a critical 9.9-out-of-10 flaw in its AI Gateway that lets a logged-in user with Duo Agent Platform access escape the prompt template sandbox via a specially crafted flow configuration and potentially run...