CVE-2026-90970 2

Vulnerability (CVE)

Git Lab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

GitLab disclosed CVE-2026-90970 on October 2, a critical 9.9-out-of-10 flaw in its AI Gateway that lets a logged-in user with Duo Agent Platform access escape the prompt template sandbox via a specially crafted flow configuration and potentially run...

Vulnerabilities & Patching

Git Lab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

Cyber Risks The Hacker News

GitLab released patches for CVE-2026-97229, a CVSS 10.0 integer overflow flaw that could let an unauthenticated user execute arbitrary code on the GitLab server through a specially crafted regular expression in a CI/CD configuration, which GitLab...

Vulnerabilities & Patching