> TritonInfoSec News
Home / Oct 03, 2026 / Story
0
#5 BleepingComputer general October 02, 2026 at 16:20 UTC

GitLab warns of critical RCE vulnerability in AI Gateway service

By Sergiu Gatlan

AI Summary

GitLab issued an emergency advisory for a critical RCE vulnerability in its AI Gateway service, fixed in versions 19.2.4, 19.3.2, and 19.4.1. The flaw allows authenticated users with Duo Agent Platform access to execute arbitrary commands on the gateway server, affecting only organizations self-hosting their GitLab AI Gateway.

Read full article → https://www.bleepingcomputer.com/news/security/git…

Relevance score: 86.0/100

# More from October 03

  1. 1
    Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes The Hacker News
  2. 2
    Warlock ransomware breach SharePoint in water, telecom operator attacks BleepingComputer
  3. 3
    Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes The Hacker News
  4. 4
    Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers The Hacker News
  5. 6
    AI Agents Aimed SQL Injection at US and Canadian Government Sites SecurityWeek
  6. 7
    Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability SecurityWeek
  7. 8
    ShinyHunters suspect arrested, and is now investigated over alleged murder plots Graham Cluley
  8. 9
    In Rare Move, Alleged Iranian State Hacker Extradited to US SecurityWeek
  9. 10
    US sanctions Tren de Aragua gang members in ATM hacks crackdown BleepingComputer