ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 5h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 8h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 8h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 9h Vulnerability in Sparx Systems Enterprise Architect software · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilities in Slican telephone exchanges · 10h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 13h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 14h ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 5h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 8h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 8h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 9h Vulnerability in Sparx Systems Enterprise Architect software · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilities in Slican telephone exchanges · 10h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 13h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 14h
🛡️
ACyber Sentinel Security Assessment Team
← Back to feed
🇬🇧 English 🇮🇷 فارسی 🇸🇦 العربية 🇷🇺 Русский 🇨🇳 中文 🏛️ Latina
⚠️ Vulnerability Report

CVE-2026-90970

CRITICAL CVSS 9.9 CVSS 3.1 📌 Awaiting Analysis

CVE-2026-90970 - Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

Published: Oct 02, 2026 15:17

Last Modified: Oct 02, 2026 18:44

More from CVE-2026-90970

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software t...

📰 The Hacker News 🕐 2d
CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

Executive SummaryAtlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Ce...

📰 TheCyberThrone 🕐 Oct 07
Microsoft Releases Out-of-Band Exchange Security Update

Microsoft Releases Out-of-Band Exchange Security Update

October 6, 2026Executive SummaryMicrosoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elev...

📰 TheCyberThrone 🕐 Oct 06
CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler ...

📰 TheCyberThrone 🕐 Oct 05
CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

October 3, 2026AI infrastructure is quickly becoming part of the enterprise attack surface, and CVE-2026-90970 is a good example of why.Zero...

📰 TheCyberThrone 🕐 Oct 03
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain c...

📰 The Hacker News 🕐 Oct 02