【Vulnerability Alert】High-risk security vulnerability (CVE-2026-90970) exists in GitLab AI Gateway, please verify and respond promptly

• Subject:【Vulnerability Alert】High-risk security vulnerability (CVE-2026-90970) exists in GitLab AI Gateway, please verify and respond promptly

• Description:
  • Forwarded National Intelligence Sharing and Analysis Center Cybersecurity Message Alert NISAC-200-202610-00000011
  • Researchers have discovered a sandbox escape vulnerability (CVE-2026-90970) in GitLab AI Gateway. An authenticated remote attacker with permissions for Duo Agent Platform workflow configuration and template settings can escape the prompt template sandbox restrictions by submitting a specially crafted prompt template, and further execute arbitrary commands on the AI Gateway. Please verify and respond promptly.
• Affected Platforms:
  • GitLab AI Gateway versions from 18.1.6 up to (but not including) 19.2.4, from 19.3.0 up to (but not including) 19.3.2, and from 19.4.0 up to (but not including) 19.4.1
• Recommended Actions:
  • The vendor has released a patch or update for the vulnerability. Please refer to the official documentation to respond. The URL is as follows: https://docs.gitlab.com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/
• References:
  1. https://nvd.nist.gov/vuln/detail/CVE-2026-90970
  2. https://docs.gitlab.com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/

Computer and Communication Center
Network System Division