AINewsnow

GitLab's AI Gateway Sandbox Escape Ends in Command Execution on Self-Hosted Instances

This story is from 2026-10-11. It is preserved in the archive; the latest stories are on the live feed.

TL;DR GitLab has patched CVE-2026-90970, an issue in the GitLab AI Gateway that could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox through a specially crafted flow configuration, leading to arbitrary command execution on the gateway. The se…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-11 14:00 · DEV Community — AI
    GitLab's AI Gateway Sandbox Escape Ends in Command Execution on Self-Hosted Instances

More stories

  1. An Anthropic AI model sent a false homicide tip to Philadelphia police — TechCrunch AI
  2. Qwen Image 2.1 Turbo Released -- Hugging Face — r/StableDiffusion
  3. Microsoft CEO Nadella Calls for ‘Emergency Brake’ on Advanced AI — Bloomberg AI
  4. Microsoft unveils Microsoft-Decision-1, a fast decision-scoring model trained on Qwen3.5-9B, and says it will soon rebase it on MAI, OpenAI, and other models (Achint Srivastava/Command Line) — Techmeme
  5. Daily Driving Qwen 3.8 Flash-Next MoE (NVFP4) on RTX 5090 + 128GB RAM — Telemetry & Impressions — r/LocalLLM
  6. Microsoft's Nadella says AI needs an ‘emergency brake’ that humans control — CNBC Technology
  7. Philadelphia police receive false homicide tip from Anthropic AI model — The Hill Technology
  8. How Oracle Uses Codex to Help Business Users Get Answers — OpenAI YouTube

Get the daily brief of stories like this at 6:30 every morning →