Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
GitLab Patches Critical AI Gateway Flaw Allowing Arbitrary Command Execution
Excerpt
GitLab has released critical security updates for its AI Gateway to address CVE-2026-90970, a vulnerability that could allow authenticated users to execute arbitrary commands on vulnerable self-hosted deployments. The flaw carries a CVSS score of 9.9 out of 10 and affects GitLab AI Gateway versions beginning with 18.1.6 across several release branches. GitLab issued patched AI Gateway releases 19.2.4, 19.3.2, and 19.4.1, urging all customers operating a GitLab Self-Hosted AI…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-90970 | High | Score 59/100 | First seen |
IOC Relationship Graph
Building graph…