# GitLab warns of critical RCE vulnerability in AI Gateway service

> **Open Intelligence Dossier** · First detected: 2026-10-04 08:20 UTC · Category: Business

## Executive Summary
GitLab has patched a critical 9.9 rated remote code execution vulnerability in its AI Gateway service that was being actively exploited.

## Intelligence Brief
GitLab has issued a warning and released patches for a critical vulnerability identified as CVE-2026-90970. This flaw exists within the company's AI Gateway service and is categorized as a remote code execution (RCE) vulnerability. According to coverage, the security flaw allows for command execution on servers that are self-hosted. The vulnerability is particularly severe because it allows unauthenticated users to perform data exfiltration, meaning attackers do not need valid credentials to access or remove sensitive information from the affected systems. Multiple cybersecurity and tech news outlets have emphasized the severity of this event. BleepingComputer reports on the warning issued by GitLab regarding the AI Gateway service, while The Hacker News highlights that the flaw enables command execution specifically on self-hosted servers.


InfoQ reports that the vulnerability was under active exploitation at the time of reporting, focusing on the risk of unauthenticated data exfiltration. Additionally, reports from forkast.news and Pasquale Pillitteri confirm that GitLab has officially released patches to address the security gap. The technical stakes of this vulnerability are reflected in its score, which is listed as a 9.9. This high rating indicates a critical level of risk to the infrastructure of organizations utilizing the AI Gateway. The context provided by the coverage suggests that the primary target of this vulnerability is the self-hosted environment, where administrators are responsible for their own server maintenance and patching schedules. The ability for an unauthenticated actor to execute commands and exfiltrate data makes this a high-priority security event for GitLab users.


Moving forward, the focus remains on the deployment of the available patches. Because coverage from InfoQ indicates the flaw was under active exploitation, the immediate priority for affected organizations is to apply the updates released by GitLab. The situation highlights the ongoing risks associated with AI-integrated services and the necessity of rapid patching cycles for self-hosted enterprise software. Further updates will likely depend on the rate of adoption of these patches across self-hosted GitLab installations.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| Pasquale Pillitteri | GitLab patches the 9.9 CVE-2026-90970 vulnerability in its AI Gateway | [Source Link](https://news.google.com/rss/articles/CBMinwFBVV95cUxNNml3UmxjWWdFcWltRlZhdXJXaWdqTTRwNldMcDBvYTh1QXJWTDlNaGR5T2Q3aFBFbHByenptSFJ2VzMtQUlKcHRiRDduZHVDckQ4OXV4dmRPejNTYi1ON0NLNk9XMWoxeGxWbVNKc1NaejJqbTl6Mi1VaWF3OFFESGQ5VDZUeFpua1FldEk3N3pDRnJrZUxOQkpXWlI2ckU?oc=5) |
| forkast.news | GitLab Patches Critical AI Gateway RCE Vulnerability — Prompt Template Sandbox Escape Rated CVSS 9.9 | [Source Link](https://news.google.com/rss/articles/CBMivAFBVV95cUxNZW9kMHV6S09kc2hsaURLRklLMFJ4T1F2a29RMFBTenk3QjBBZ2tPUVpOMTBQX1hXU3V0bENDaG1fSHF4VW5YdTF4VTdJUGsxVUttaTB6cVUwZHZrTHgyTERJWlNkLUdKOHFUZ3pJN2lyd0hZX1RrcWQyUFNMR1AxTnQ4VExuaW9UTVNKb1JoaWNoeTk3LV9xdTEySkR2LUpxMWVuUUZ3TGVzNllpaU05Wkh0MHc3Ql9GNFJ5bw?oc=5) |
| infoq.com | GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration | [Source Link](https://news.google.com/rss/articles/CBMidkFVX3lxTE9BZUF1N2hYa0ZiRGZNSmM4dkFTNml5XzRsenpnZHFlby1lcnQ0R2ZBX1gyQmNNeVBCWEt4V2R6Xzh0STQ3NVhWRUk3VVZzODI4eVhHTTFBbk5JSGhyRXZ4N3NQZ2tzeE11VlJBWFRMYlB2aktTd2c?oc=5) |
| The Hacker News | GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxNTEtUeFUtb2pFQVluWkNXMGZvZjhjNnluYk85VG1MaXBEZ3pBd0FuTXBXaVZZd1JWcXduWDBiOGgzcjdtSU5peHhqa0NkU1I4UHdJNDlkanpmV1VySFd1bzFPeE1XNXUzQWE1YmdsSjE2ajdGdUJlUFp4c2F0cTVYaVJOdw?oc=5) |
| BleepingComputer | GitLab warns of critical RCE vulnerability in AI Gateway service | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxNd2xlYjZ2SEYwa29YaGV1akZtRjJrbmNDbEVpY3p3b3BOX3UyMUkxbnQ2TldjWk5zU3VVTkZyVkNIdTlXeWduUTN6SG9aY3EzRi1IZG5OYkVBbGJ3WE5xRHZTdGllTFNGX0EwWlZnNGRCWWR2eHZrZi1oa3YxV1JBZHVIbDFEdThEM29ucUJyNVhRa2EtWnlBNFlXcEtvaGxEV2pzSjFlWXBIMUVkdTRTOVhn0gG3AUFVX3lxTE41aV92SW8xZkhxa2JjNGNnc1dTSmJpVlViVmVST0FPVEI4Nm5BV0dGMjlKeExIYUR4dlBkT19qZmF0LWk4SEl2bWpKOE82dVZvOWZSWFFTcTdKbG5YMWNLa3lkWFpWaXVlQS0xOTN3NDdYWExndXFVS2doZnBPZkg0TUJaQ1R3Vy1aeFRqZzdhYThHLVNBYkxNem9uZ1VFa2x) |

---
*Canonical Source: https://pulse.byoaiapps.com/trend/2026-10-04/gitlab-warns-of-critical-rce-vulnerability-in-ai-gateway-service*