GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

GitLab has patched a critical vulnerability in its AI Gateway that could allow a logged-in user with specific access to execute commands on the gateway. The issue affects self-hosted servers and arises under certain conditions when the Duo Agent Platform is used. The AI Gateway is a service that connects a GitLab instance to AI models. Organizations that host their own gateway are the ones that need to take action. The vulnerability has been fixed in versions 19.2.4, 19.3.2, and 19.4.1 of the gateway.