Unverified50% confidenceFactExact time
The vulnerability allows attackers to remotely exhaust system resources by sending massive numbers of requests, causing GPU monitoring interruptions and affecting AI training and inference tasks.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAttackers can use LLMs to batch-generate seemingly valid vulnerability reports or patches, placing a heavy verification burden on maintainers.68% similarUnverifiedThe CVE-2026-90970 vulnerability exists in the GitLab AI Gateway component and allows authenticated users with access to the Duo Agent Platform to escape the prompt template sandbox via a specially crafted workflow configuration, thereby executing arbitrary commands on the AI Gateway.68% similarUnverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件67% similarUnverifiedAfter agents gain tool-calling and external system access capabilities, the attack surface expands significantly, facing risks such as prompt injection, unauthorized operations, and data leakage67% similarUnverifiedAt the Black Hat conference on August 5, security researchers disclosed a new class of attacks targeting AI coding agents, in which a zero-privilege attacker only needs to open a GitHub Issue in the target repository to induce the agent to execute malicious instructions and steal credentials from the CI environment.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1003329API
curl https://kongchang.com/api/v1/knowledge/claims/1003329MCP
get_claim(id=1003329)