CVE-2026-90970
A critical security vulnerability in GitLab AI Gateway with a CVSS score of 9.9. It allows authenticated users to escape the prompt template sandbox through crafted workflow configurations and execute arbitrary commands on the gateway.
Timeline (last 90 days)
GitLab fixed a security vulnerability identified as CVE-2026-90970 with a CVSS score of 9.9.
The CVE-2026-90970 vulnerability exists in the GitLab AI Gateway component and allows authenticated users with access to the Duo Agent Platform to escape the prompt template sandbox via a specially crafted workflow configuration, thereby executing arbitrary commands on the AI Gateway.
The CVSS score of this vulnerability, combined with "scope change," means its impact breaks out of the security boundary of the affected component itself and causes high impact on confidentiality, integrity, and availability.
Responsible disclosure of this vulnerability was completed by a HackerOne researcher.
All Facts (4)
GitLab fixed a security vulnerability identified as CVE-2026-90970 with a CVSS score of 9.9.
50%UnverifiedThe CVE-2026-90970 vulnerability exists in the GitLab AI Gateway component and allows authenticated users with access to the Duo Agent Platform to escape the prompt template sandbox via a specially crafted workflow configuration, thereby executing arbitrary commands on the AI Gateway.
50%UnverifiedThe CVSS score of this vulnerability, combined with "scope change," means its impact breaks out of the security boundary of the affected component itself and causes high impact on confidentiality, integrity, and availability.
50%UnverifiedResponsible disclosure of this vulnerability was completed by a HackerOne researcher.
50%