Remote Code Execution Vulnerability in GitLab AI Gateway

A vulnerability identified as CVE-2026-90970 affects multiple versions of the GitLab AI Gateway. This flaw allows an unauthenticated remote attacker to achieve arbitrary code execution on the underlying host. The vulnerability is present in versions 19.3.x prior to 19.3.2, versions 19.4.x prior to 19.4.1, and versions 18.1.6 through 19.2.4. GitLab released security patches on October 2, 2026, to address this flaw. Organizations running AI Gateway components should prioritize patching to the latest safe versions to mitigate the risk of full system compromise.

Impact

Successful exploitation allows an unauthenticated attacker to gain remote code execution capabilities on the GitLab AI Gateway server. This can lead to complete system takeover, unauthorized access to sensitive data processed by the AI Gateway, or lateral movement within the network environment.

Recommendation

Prioritize patching all affected GitLab AI Gateway instances to the versions specified in the official GitLab security bulletin. Ensure that internet-facing instances are monitored for anomalous outbound traffic or unexpected child process execution from the AI Gateway service account.