Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

CVE-2026-90970: GitLab AI Gateway RCE

SOCRadar
SOCRadar
Published October 5, 2026Original Report

Excerpt

CVE-2026-90970: GitLab AI Gateway RCE GitLab has patched CVE-2026-90970 , a critical vulnerability in the Self-Hosted AI Gateway that can allow an authenticated user with Duo Agent Platform access to execute arbitrary commands on the gateway. The flaw carries a CVSS 3.1 score of 9.9 . GitLab strongly recommends that affected Self-Hosted AI Gateway customers upgrade to 19.2.4, 19.3.2, or 19.4.1 as soon as possible. Active exploitation has not been confirmed. What Is…

Read the original report →

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-90970HighScore 59/100First seen

IOC Relationship Graph

Building graph…