Severity: CriticalVulnerabilityModel/inference
GitLab AI Gateway command execution vulnerability in self-hosted deployments
Global
Live intelligence. Items are aggregated from public sources and summarised automatically. Always verify against the linked source before acting.
A critical vulnerability in GitLab's AI Gateway permits authenticated users with Duo Agent Platform access to execute arbitrary commands on the gateway service. The vulnerability affects self-hosted gateway instances and is resolved in versions 19.2.4, 19.3.2, and 19.4.1.
What to do
Organizations running self-hosted GitLab AI Gateways should immediately upgrade to versions 19.2.4, 19.3.2, or 19.4.1 and audit access logs for Duo Agent Platform users.
Mapped framework pillars
Sources
#GitLab#AI Gateway#command execution#self-hosted#agent platform#authentication