Patch the Gateway Your Feature Actually Uses
GitLab urges an immediate update to customer-operated AI Gateway deployments for CVE-2026-90970. Under some conditions, a signed-in operator with access to Duo Agent Platform could use a crafted workflow to break template isolation and run commands on that service. The vendor rates the issue 9.9.
Which builds?
- 18.1.6 up to, but excluding, 19.2.4.
- 19.3 up to, but excluding, 19.3.2.
- 19.4 up to, but excluding, 19.4.1.
Install the upper version for the affected branch, or a later fixed release.
The vendor-operated gateway is already fixed. GitLab.com, Dedicated and Self-Managed customers routed there need no gateway patch. Customer-operated gateways do.
Check each feature’s route, patch affected builds, then verify the running version. Updating the core application alone is insufficient.
The notice makes no active-exploitation claim; that does not prove none occurred.
