Originally published at: GitLab fixes critical AI Gateway flaw enabling arbitrary command execution - ToolsLib Blog
GitLab fixed CVE-2026-90970, a critical AI Gateway vulnerability that could allow authenticated users with Duo Agent Platform access to execute arbitrary commands on vulnerable self-hosted instances.