GitLab AI Gateway Prompt Sandbox Escape CVE-2026-90970 (18.1.6-19.4.1)
CVE-2026-90970 Published on October 2, 2026
Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.
Vulnerability Analysis
CVE-2026-90970 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Products Associated with CVE-2026-90970
Want to know whenever a new CVE is published for GitLab Ai Gateway? stack.watch will email you.
Affected Versions
GitLab AI Gateway:- Version 18.1.6 and below 19.2.4 is affected.
- Version 19.3 and below 19.3.2 is affected.
- Version 19.4 and below 19.4.1 is affected.