GitLab AI Gateway sandbox escape leads to full RCE
GitLab AI Gateway falls and the prompt sandbox turns into RCE The main case The vulnerability is tracked as CVE-2026-90970 with a CVSS score of 9.9 and it affects GitLab AI Gateway (Source: thehackernews.com). The flaw lives in the prompt template sandbox, the layer that should isolate the text a user sends to the model from the internal functions of the system. An authenticated user with access to Duo Agent Platform can escape that isolation and run arbitrary commands on the server where the Ga
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.