[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f47eHOJoE8-sGgKSpRykR6HNOsXmVw6bg4afZxXpYgXA":3},{"article":4,"iocs":49,"watch_terms":57,"solutions":58,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"27ca76a7-2a76-4f33-b2cb-9816fcb91c26","GitLab warns of critical RCE vulnerability in AI Gateway service","gitlab-warns-of-critical-rce-vulnerability-in-ai-gateway-service-9814df","GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]","GitLab disclosed CVE-2026-90970, a critical remote code execution vulnerability in its AI Gateway service that allows authenticated users with Duo Agent Platform access to escape the prompt template sandbox and execute arbitrary commands. The flaw affects self-hosted AI Gateway deployments; GitLab released patched versions 19.2.4, 19.3.2, and 19.4.1, while cloud-hosted instances are already protected. This follows GitLab's recent patching of CVE-2026-85706, a maximum severity path traversal flaw that CISA added to its actively exploited vulnerabilities list.","GitLab patches critical RCE in AI Gateway allowing arbitrary command execution","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fgitlab-warns-of-critical-rce-vulnerability-in-ai-gateway-service\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F14\u002FGitLab.jpg","2026-10-02T16:20:05+00:00","2026-10-02T18:00:10.198841+00:00",9,[17,20,23,25],{"name":18,"type":19},"GitLab","vendor",{"name":21,"type":22},"GitLab AI Gateway","product",{"name":24,"type":22},"GitLab Duo",{"name":26,"type":27},"Duo Agent Platform","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":45},{"id":46,"icon":30,"name":47,"slug":48},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[50,54],{"type":51,"value":52,"context":53},"cve","CVE-2026-90970","Critical RCE in GitLab AI Gateway via prompt template sandbox escape",{"type":51,"value":55,"context":56},"CVE-2026-85706","Maximum severity path traversal in GitLab CE\u002FEE, actively exploited, added to CISA KEV",[18,21,24],{"controls":59,"vendors":143},[60,89,118],{"slug":61,"name":62,"problem":63,"products":64},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"slug":90,"name":91,"problem":92,"products":93},"patch-management","Automated patch management","Known holes get closed in days, not months.",[94,102,110],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":48,"name":119,"problem":120,"products":121},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[122,127,135],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":123,"product_name":124,"url":125,"description":126},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",[],{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":158},"critical-rce-in-gitlab-ai-gateway-demands-immediate-patching","Critical RCE in GitLab AI Gateway Demands Immediate Patching","A critical remote code execution vulnerability (CVE-2026-90970) in GitLab's AI Gateway service allows authenticated users to break out of a prompt template sandbox and execute arbitrary commands on self-hosted deployments — a severe risk given that authenticated access can still lead to full system compromise. This matters because AI-integrated services are rapidly expanding the attack surface of development platforms, and sandbox escapes in AI components represent an emerging and underappreciated threat vector. The fact that a second maximum-severity vulnerability (CVE-2026-85706) was simultaneously added to CISA's actively exploited list underscores that GitLab environments are under active threat. Self-hosted deployments are particularly exposed because they lack the automatic protections that cloud-hosted instances receive, placing the remediation burden entirely on operators.",[149,150,151,152,153,154,155,156,157],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Controlled Use of Administrative Privileges","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AU-12: Audit Record Generation","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","CISA KEV Catalog Remediation Guidance","ITIL Change Management: Emergency Change Procedure",{}]