> TritonInfoSec News
Home / Oct 04, 2026 / Story
0
#4 The Hacker News general October 02, 2026 at 17:33 UTC

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

By [email protected] (The Hacker News)

AI Summary

GitLab patched a critical 9.9 CVSS vulnerability in its AI Gateway component that could allow an authenticated user with Duo Agent Platform access to execute arbitrary commands on self-hosted gateway servers. Fixed versions are 19.2.4, 19.3.2, and 19.4.1; only organizations self-hosting the AI Gateway are affected and must apply patches immediately. The flaw sits at the intersection of AI infrastructure and privilege escalation — a growing attack surface as enterprises deploy AI-integrated DevOps pipelines.

Read full article → https://thehackernews.com/2026/10/gitlab-patches-c…

Relevance score: 82.0/100

# More from October 04

  1. 1
    Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action SecurityWeek
  2. 2
    Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware The Hacker News
  3. 3
    Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign The Hacker News
  4. 5
    ShinyHunters hacker reportedly detained in Jordan, aiding FBI BleepingComputer
  5. 6
    Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools The Hacker News
  6. 7
    Dell asks admins to patch max severity CSM flaws as soon as possible BleepingComputer
  7. 8
    Microsoft’s X account hacked in crypto pump-and-dump scheme BleepingComputer
  8. 9
    Frontline Education breach exposes school district employee data BleepingComputer
  9. 10
    Danish university DTU breach exposes data of up to 200,000 people BleepingComputer