cd /news/ai-safety/gitlab-patches-rce-flaw-in-ai-gatewa… · home › topics › ai-safety › article
[ARTICLE · art-144024] src=osintsights.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

GitLab patches RCE flaw in AI Gateway service

GitLab patched a critical remote-code-execution flaw, tracked as CVE-2026-90970, in its AI Gateway service that could have let attackers run arbitrary commands on vulnerable instances, including users with basic privileges. GitLab urged users to apply the patch as soon as possible.

by read1 min views3 publishedOct 2, 2026

GitLab has patched a critical remote-code-execution flaw in its AI Gateway service, known as CVE-2026-90970, which could have allowed attackers to run arbitrary commands on vulnerable instances. Even users with basic privileges could exploit this vulnerability, making it essential to apply the patch ASAP.

source & further reading
osintsights.com — original article California Probes OpenAI Over Escaped AI Agents Zero-Days Exploited in Agentic AI Attack on Dutch Vulnerability Disclosure Institute AI Agents Target US, Canada Government Sites in Data Retrieval Push
── more in #ai-safety 4 stories · sorted by recency
── more on @gitlab 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/gitlab-patches-rce-f…] indexed:0 read:1min 2026-10-02 · —