Multiples vulnérabilités dans GitLab (30 septembre 2026)

vulnerability

Multiples vulnérabilités dans GitLab (30 septembre 2026)

Multiple vulnerabilities have been discovered in GitLab, allowing an attacker to compromise data confidentiality and bypass security policies. Users are advised to apply the patches released by GitLab.

CERT-FR · Sep 30, 2026 CriticalCVSS 10.0KEVEPSS 93%

CVE-2026-85706 CVE-2026-87719 vulnerability gitlab cve

vulnerability

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

A critical vulnerability (CVE-2026-90970) in GitLab's AI Gateway allows a logged-in user with Duo Agent Platform access to execute arbitrary commands on self-hosted gateways. Self-managed users should immediately update…

The Hacker News · Oct 2, 2026 HighCVSS 9.9

CVE-2026-90970 CVE-2026-1868 cve vulnerability ai

news.mlab.sh

Multiples vulnérabilités dans GitLab (30 septembre 2026)

Multiples vulnérabilités dans GitLab (30 septembre 2026)

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers