security Source: The Hacker News
📅 03 October 2026 at 12:30 AM UTC

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

Verified Primary Feed Ingestion
↗ Open Source Publication
⚡ Executive Takeaways & Intelligence Summary
A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1. The flaw
Publication Reference: https://thehackernews.com/2026/10/gitlab-patches-critical-self-hosted-ai.html
← Back to News Wire

📰 Related Surveillance Disclosures

BleepingComputer
Hackers pull off $133 million French bank heist via service provider
BleepingComputer
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
The Hacker News
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub