CVE-2026-90970

CRITICAL 9.9CVE-2026-90970 · Published 02/10/2026 · updated 02/10/2026

In short

CVE-2026-90970 is a CRITICAL (CVSS 9.9) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 17.5%, higher than 97.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

References

gitlab.com/gitlab-org/gitlab/-/work_items/628842

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free