GitLab Patches Critical 9.9 AI Gateway Flaw Enabling Remote Code Execution
· Cybersecurity
GitLab issued an advisory urging customers to immediately patch a critical AI Gateway vulnerability that could let a logged-in user with Duo Agent Platform access run arbitrary commands on self-hosted servers. The flaw carries a severity score of 9.9 and affects only organizations hosting their own gateway.
Why it matters：As AI gateways become connective infrastructure, critical flaws in them can hand attackers code execution inside enterprise networks.
Key points
- Exploitation requires a logged-in user with Duo Agent Platform access.
- Only self-hosted gateway deployments need to act.
- GitLab rated the vulnerability 9.9 out of 10.
Sources (original reporting)
More stories from this day
- Warlock Exploits SharePoint Flaws to Breach Water, Telecom Targets
- Antino Backdoor Abuses Outlook, OneDrive for C2 in Asia Espionage
- DTU Breach Exposes Data of Up to 200,000 People
- Bipartisan Bills Target Automated License Plate Readers
- California subpoenas OpenAI over AI agents used in hacking incidents
- G7 to release 100 million barrels of diesel and crude reserves