Post
Cybersecurity News Everyday
hendryadrian.bsky.social
did:plc:u6celkmubfsmbus5m3aqcrla
GitLab fixed CVE-2026-90970, a critical 9.9 AI Gateway flaw in self-hosted servers that could let logged-in Duo Agent Platform users run commands. Patched in 19.2.4, 19.3.2, and 19.4.1. #GitLab #CVE202690970 #DuoAgentPlatform
https://www.hendryadrian.com/gitlab-patches-critical-9-9-ai-gateway-flaw-allowing-command-execution-on-self-hosted-servers/
2026-10-02T22:00:30.258Z