AINewsnow

GitLab AI Gateway CVE-2026-90970: "SSTI Wearing an AI Costume"

This story is from 2026-10-09. It is preserved in the archive; the latest stories are on the live feed.

Disclosed: 2026-10-02. Sources: BleepingComputer (advisory quoted verbatim), The Hacker News, aiweekly, cyberpress, SecurityAffairs, ThaiCERT, dev.to/cortexflow_tech (patch guide), dennysentinel, forkast, labs.cosmicbytez. February CVE cross-checked against GitLab's own Feb 6, 2026 AI Gateway patch…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-09 06:13 · DEV Community — AI
    GitLab AI Gateway CVE-2026-90970: "SSTI Wearing an AI Costume"

More stories

  1. GPT-6 and Intelligent UI for everyone — OpenAI News
  2. Introducing Mistral Large 4 — Mistral AI News
  3. Introducing Claude Haiku 5.5 on AWS — AWS Machine Learning Blog
  4. Sharing AI progress in mathematics — OpenAI News
  5. OpenAI Decisions API now available on AI Gateway — Vercel Blog
  6. Anthropic bans ‘abusive or cruel behavior’ toward Claude — The Verge AI
  7. Introducing Playground: Create and play custom games — Google AI Blog
  8. Anthropic launches OSS Scanner, which provides free, opt-in security audits for open-source projects by sending AI-generated reports without human review (Anthropic) — Techmeme

Get the daily brief of stories like this at 6:30 every morning →