sign in--:--:--UTC

CVE-2026-90970

☆ pin

CVSS

9.9

Reports

3

First seen

Oct 2, 2026

Last seen

Oct 5, 2026

Affected product

GitLab AI Gateway (self-hosted)

Associated actors

Star Blizzard ×1 Storm-3168 ×1 TA419 ×1 UAT-11587 ×1 Warlock ×1

Recent reports

Weekly Threat Intelligence Report – 5 October

Check Point ResearchOct 5, 2026 Critical

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution

The Hacker NewsOct 2, 2026 Critical

GitLab warns of critical RCE vulnerability in AI Gateway service

Bleeping ComputerOct 2, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans