← Back to the feed

~/article/gitlab-patches-critical-9-9-ai-gateway-flaw-allowing-command-execution-o-fuhspp
highSource: The Hacker News

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1. The flaw

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Topics

ai
~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks
Talk to usSee cymesh.net

Related

~/related/gitlab-patches-critical-9-9-ai-gateway-flaw-allowing-command-execution-o-fuhspp