VulnHub

Real-time Cybersecurity News

Critical

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

The Hacker News
VulnerabilityPatchUpdateCritical

Overview

GitLab has announced a significant security flaw in its AI Gateway that could allow a logged-in user with Duo Agent Platform access to execute commands on the gateway. This vulnerability affects organizations that self-host their GitLab instances, as the AI Gateway serves as the link between these instances and AI models. The issue has been addressed in the latest releases, specifically versions 19.2.4, 19.3.2, and 19.4.1. Users of the affected versions are urged to update promptly to mitigate any risks associated with this flaw. Failure to act could leave systems vulnerable to unauthorized command execution.

Key Takeaways

  • Affected Systems: GitLab AI Gateway versions prior to 19.2.4, 19.3.2, and 19.4.1
  • Action Required: Update to GitLab AI Gateway versions 19.
  • Timeline: Disclosed on [date]

Original Article Summary

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1. The flaw

Impact

GitLab AI Gateway versions prior to 19.2.4, 19.3.2, and 19.4.1

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Disclosed on [date]

Remediation

Update to GitLab AI Gateway versions 19.2.4, 19.3.2, or 19.4.1

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability, Patch, Update, and 1 more.

Read Original Article

Related Coverage

Frontline Education breach exposes school district employee data

BleepingComputer

Frontline Education has reported a data breach affecting multiple school districts after hackers exploited a weakness in third-party software. The breach allowed unauthorized access to sensitive employee information, notably including Social Security numbers. This incident raises serious concerns about the security of personal data in educational institutions, which are often targeted due to the sensitive nature of their records. Affected districts will need to address potential identity theft risks and enhance their cybersecurity measures to protect against future breaches. School employees should remain vigilant for any unusual activity related to their personal information.

Oct 2, 2026

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

The Hacker News

Dell has issued security updates to fix several serious vulnerabilities in its Container Storage Modules (CSM), which could allow attackers to gain unauthorized administrative access and potentially control Kubernetes nodes. One of the most critical flaws, identified as CVE-2026-63688, has a CVSS score of 10.0, indicating its severity. These vulnerabilities could be exploited without authentication, putting systems at risk of being taken over. Organizations using Dell's CSM should prioritize applying these updates to protect their environments. The implications of these flaws are significant, as they could lead to unauthorized access to sensitive data and disruption of services.

Oct 2, 2026

Malicious Linux Implants Mimic Asian Mail Security Products

darkreading

Researchers have recently identified three backdoors that mimic legitimate Linux security products, specifically those used in mail systems. These malicious implants are designed to go unnoticed, making it challenging for users and security teams to detect them. This poses a significant risk, as attackers can gain unauthorized access to sensitive data and systems while masquerading as trusted solutions. Companies relying on these types of software should remain vigilant and monitor for suspicious activity. The discovery emphasizes the need for robust security measures to protect against such deceptive tactics.

Oct 2, 2026

Dell asks admins to patch max severity CSM flaws as soon as possible

BleepingComputer

Dell has issued a warning to administrators about two severe vulnerabilities found in their Container Storage Modules (CSM), which are used to connect Dell's enterprise storage systems to Kubernetes environments. These vulnerabilities could potentially allow attackers to gain unauthorized access or disrupt services, making it critical for affected users to act quickly. Dell emphasizes the urgency of applying the patches to ensure the security of their systems. This issue primarily impacts organizations utilizing Dell's enterprise storage solutions in conjunction with Kubernetes, highlighting the importance of maintaining up-to-date software in enterprise environments. Administrators are urged to prioritize these updates to safeguard their infrastructure from potential threats.

Oct 2, 2026

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling

The Hacker News

OpenAI has dismissed three members of its safety team for leaking confidential information, which violated the company's internal policies. A spokesperson confirmed that the company conducted an investigation that validated these breaches. The incident raises concerns about how sensitive information is managed within organizations, especially those dealing with advanced technologies like AI. Maintaining strict protocols for handling confidential data is crucial to prevent potential misuse or breaches that could impact users and the industry at large. The actions taken by OpenAI highlight the importance of accountability in safeguarding sensitive information.

Oct 2, 2026

In Rare Move, Alleged Iranian State Hacker Extradited to US

SecurityWeek

Amir Barati, an alleged hacker linked to the Iranian state-backed Mabna Institute, has been extradited to the United States after being indicted for cyberattacks targeting various institutions. These attacks reportedly affected universities, private companies, and government entities both in the U.S. and internationally. Barati is accused of stealing sensitive information and conducting espionage on behalf of the Iranian government. This extradition is notable as it reflects ongoing efforts by U.S. authorities to hold foreign hackers accountable for cybercrimes. The case raises concerns about the security of academic and governmental systems, particularly from state-sponsored actors.

Oct 2, 2026