AI Security

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

October 02, 2026 1 min read 4 views
cybersecurity threats news
A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1. The flaw

Was this article helpful?

0 found this helpful

Related Articles

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

1 min read

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

1 min read

An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo