{"id":"CVE-2026-90970","summary":"Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway","details":"GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.","modified":"2026-10-04T02:46:13.910137186Z","published":"2026-10-02T14:34:49.558Z","database_specific":{"cwe_ids":["CWE-1336"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90970.json","cna_assigner":"GitLab"},"references":[{"type":"WEB","url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/628842"},{"type":"WEB","url":"https://gitlab.com/gitlab-org/modelops/applied-ml/code-suggestions/ai-assist"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90970.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90970"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/gitlab-org/modelops/applied-ml/code-suggestions/ai-assist","events":[{"introduced":"58a46f82e3df0bd95d2bbc6424536abf70bcec44"},{"fixed":"0141f228c05216d97eae940261c824e64c73255a"},{"introduced":"c285c0645171c95a19df6d47fa49e45c3a60a6dc"},{"fixed":"449740bcd596bd398a71a18ab44dcc5366d4d474"},{"introduced":"06dfa6aa071963ba8ad9d36f992f1831554bcfa0"},{"fixed":"caec81e3aabd9d754d72ce90218ceed474bdc457"}],"database_specific":{"extracted_events":[{"introduced":"18.1.6"},{"fixed":"19.2.4"},{"introduced":"19.3"},{"fixed":"19.3.2"},{"introduced":"19.4"},{"fixed":"19.4.1"}],"source":"AFFECTED_FIELD"}}],"versions":["self-hosted-v19.3.1-ee","self-hosted-v19.2.3-ee","v1.736.2","self-hosted-v19.4.0-ee","self-hosted-v19.2.2-ee","self-hosted-v19.3.0-ee","self-hosted-v19.2.1-ee","self-hosted-v19.2.0-ee","v1.611.1","v1.614.0","v1.613.0","v1.611.0","v1.613.2","v1.613.1","v1.612.0","v1.608.0","v1.610.1","v1.587.2","v1.610.0","v1.609.0","v1.608.2","v1.607.1","v1.608.1","v1.593.3","v1.607.0","v1.605.0","v1.606.0","v1.604.0","v1.600.2","v1.603.0","v1.602.0","v1.601.0","v1.600.0","v1.546.0","v1.600.1","v1.599.0","v1.595.0","v1.598.0","v1.592.1","v1.597.0","v1.593.4","v1.596.1","v1.596.0","v1.589.1","v1.594.1","v1.594.2","v1.587.0","v1.594.0","v1.593.2","v1.593.1","v1.592.2","v1.593.0","v1.592.0","v1.591.1","v1.591.2","v1.587.1","v1.591.0","v1.590.0","v1.588.0","v1.589.2","v1.589.0","v1.581.4","v1.588.1","v1.586.0","v1.582.0","v1.585.0","v1.583.0","v1.584.0","v1.579.0","v1.563.0","v1.581.3","v1.581.2","v1.580.0","v1.581.1","v1.581.0","v1.578.0","v1.576.0","v1.577.1","v1.575.1","v1.577.0","v1.574.1","v1.575.0","v1.574.2","v1.569.0","v1.574.0","v1.572.0","v1.573.0","v1.570.2","v1.571.0","v1.567.0","v1.558.2","v1.562.1","v1.570.1","v1.568.0","v1.570.0","v1.552.1","v1.568.1","v1.561.0","v1.566.1","v1.566.0","v1.565.2","v1.565.1","v1.565.0","v1.562.0","v1.564.0","v1.557.0","v1.561.1","v1.559.0","v1.556.0","v1.560.1","v1.549.0","v1.560.0","v1.558.1","v1.558.0","v1.555.0","v1.554.2","v1.553.0","v1.554.1","v1.554.0","v1.552.0","v1.551.0","v1.548.1","v1.550.0","v1.548.0","v1.547.1","v1.547.0","v1.544.0","v1.545.0","v1.533.1","v1.539.1","v1.543.0","v1.542.1","v1.542.0","v1.542.2","v1.541.0","v1.532.1","v1.541.2","v1.541.1","v1.540.1","v1.536.0","v1.540.0","v1.535.0","v1.539.0","v1.529.0","v1.538.0","v1.537.0","v1.525.2","v1.525.0","v1.534.0","v1.534.2","v1.534.1","v1.533.0","v1.528.0","v1.532.0","v1.531.0","v1.524.0","v1.530.0","v1.525.1","v1.527.1","v1.527.0","v1.520.0","v1.526.0","v1.525.3","v1.522.1","v1.504.0","v1.523.0","v1.515.1","v1.521.1","v1.510.0","v1.522.2","v1.522.0","v1.499.1","v1.521.0","v1.518.1","v1.512.0","v1.519.0","v1.504.2","v1.518.0","v1.517.0","v1.515.0","v1.517.1","v1.516.1","v1.516.0","v1.515.2","v1.507.0","v1.514.0","v1.513.0","v1.511.0","v1.509.0","v1.508.0","v1.509.1","v1.493.0","v1.500.1","v1.507.1","v1.506.0","v1.505.1","v1.505.0","v1.504.4","v1.503.0","v1.504.3","v1.490.0","self-hosted-v19.0.0-ee","v1.504.1","v1.502.1","v1.502.0","v1.485.0","v1.501.1","v1.501.0","v1.500.0","v1.497.2","v1.499.0","v1.498.0","v1.492.1","v1.496.0","v1.497.1","v1.497.0","v1.494.0","v1.495.0","v1.491.2","v1.491.0","v1.492.0","v1.491.1","v1.487.0","v1.482.1","v1.489.0","v1.488.0","v1.483.0","v1.486.0","v1.484.3","v1.485.1","v1.484.2","v1.484.1","v1.484.0","v1.483.1","v1.481.0","v1.482.0","v1.480.0","v1.479.0","v1.478.0","v1.477.0","v1.472.0","v1.476.0","v1.462.0","v1.473.1","v1.475.0","v1.474.1","v1.471.0","v1.473.0","v1.474.0","v1.425.0","v1.456.0","v1.470.0","v1.469.0","v1.463.2","v1.468.0","v1.459.1","v1.467.0","v1.466.0","v1.463.1","v1.464.0","v1.465.0","v1.454.1","v1.458.0","v1.460.0","v1.463.0","v1.461.1","v1.461.0","v1.455.1","v1.459.0","v1.431.0","v1.457.0","v1.454.0","v1.455.0","v1.453.0","v1.453.1","v1.449.1","v1.452.0","v1.451.0","v1.450.0","v1.449.0","v1.445.0","v1.404.0","v1.442.0","v1.448.0","v1.447.0","v1.445.1","v1.446.0","v1.444.0","v1.422.0","v1.429.0","v1.419.0","v1.443.0","v1.440.0","v1.441.4","v1.441.3","v1.436.0","v1.441.2","v1.441.0","v1.441.1","v1.435.0","v1.437.0","v1.439.0","v1.438.0","v1.435.2","v1.426.0","v1.435.1","v1.434.0","v1.433.0","v1.432.0","v1.430.0","v1.428.1","v1.428.0","v1.422.4","v1.424.2","v1.427.0","v1.409.0","v1.424.3","v1.423.0","v1.424.1","v1.422.1","v1.424.0","v1.422.2","v1.422.5","v1.422.3","v1.416.0","v1.420.0","v1.421.0","v1.418.0","v1.414.0","v1.417.0","v1.415.1","v1.415.0","v1.413.0","v1.406.0","v1.412.0","v1.411.0","v1.410.1","self-hosted-v18.11.0-ee","v1.410.0","v1.401.1","v1.409.2","v1.409.1","v1.408.0","v1.407.0","v1.407.1","v1.405.3","v1.405.2","v1.403.2","v1.404.1","v1.405.1","v1.404.3","v1.405.0","v1.404.2","v1.401.0","v1.403.3","v1.398.0","stable-18-10-ee","self-hosted-v18.10.0-ee","v1.403.1","self-hosted-v18.9.0-ee","v1.403.0","v1.402.0","v1.400.0","v1.399.0","v1.398.1","v1.396.0","v1.394.0","v1.391.3","v1.397.0","v1.396.1","v1.395.1","v1.395.0","v1.391.2","v1.393.1","v1.382.0","v1.393.0","v1.392.0","v1.390.1","v1.383.1","v1.384.1","v1.391.1","v1.391.0","v1.388.0","v1.390.0","v1.389.0","v1.385.1","v1.387.0","v1.385.4","v1.386.0","v1.382.1","v1.385.3","v1.385.2","v1.383.4","v1.385.0","v1.383.6","v1.384.0","v1.383.7","v1.373.0","v1.383.5","v1.383.3","v1.383.2","v1.383.0","v1.378.0","v1.382.2","v1.375.1","v1.381.0","v1.380.0","v1.379.0","v1.373.1","v1.375.0","v1.377.0","v1.376.0","v1.367.1","v1.374.1","v1.368.0","v1.374.0","v1.372.0","v1.371.0","v1.371.1","v1.370.0","v1.369.0","v1.367.2","v1.366.0","v1.367.0","v1.365.2","v1.365.1","v1.365.0","v1.364.0","v1.354.0","v1.361.2","v1.363.2","v1.363.0","v1.363.1","v1.359.0","v1.361.1","v1.362.0","v1.359.1","v1.359.5","v1.361.0","v1.358.0","v1.356.0","v1.360.1","v1.348.0","v1.360.0","v1.359.4","v1.359.2","v1.359.3","v1.357.0","v1.356.2","v1.356.1","v1.350.0","v1.355.0","v1.354.1","v1.352.1","v1.349.1","v1.353.0","v1.352.0","v1.343.1","v1.350.1","v1.351.0","v1.332.0","v1.349.0","v1.338.0","v1.347.0","v1.345.0","v1.346.0","v1.344.0","v1.344.2","v1.344.1","v1.341.0","v1.343.2","v1.340.1","v1.343.0","v1.342.0","v1.338.1","v1.329.6","v1.340.0","v1.339.0","v1.338.2","v1.329.7","v1.334.2","v1.337.0","v1.336.0","v1.325.0","v1.335.0","v1.333.0","v1.330.4","v1.334.1","v1.334.0","v1.331.1","v1.330.3","v1.330.1","v1.331.0","v1.330.7","v1.321.1","v1.330.6","v1.330.5","v1.330.2","v1.329.2","v1.329.3","v1.330.0","v1.329.5","v1.307.0","v1.329.4","v1.315.0","v1.329.1","v1.329.0","v1.328.1","v1.328.0","v1.327.3","v1.327.2","v1.327.1","v1.327.0","v1.326.0","v1.322.0","v1.318.0","v1.324.1","v1.324.0","v1.323.0","v1.321.0","v1.299.1","v1.319.0","v1.320.1","v1.320.0","v1.318.1","v1.317.0","v1.315.3","v1.316.0","v1.315.2","v1.315.1","v1.314.2","v1.314.1","v1.314.0","v1.310.0","v1.311.0","v1.312.0","v1.313.1","v1.313.0","v1.309.0","v1.305.0","v1.308.0","v1.298.1","v1.304.3","v1.306.2","v1.306.1","v1.306.0","v1.304.1","v1.302.1","v1.304.2","v1.304.0","v1.303.0","v1.299.2","v1.300.0","v1.302.0","v1.301.0","v1.300.1","v1.296.1","v1.299.0","v1.297.0","v1.298.0","v1.296.0","v1.293.1","v1.295.1","v1.295.0","v1.294.0","v1.292.1","v1.291.1","v1.293.0","v1.292.2","v1.288.0","v1.292.0","v1.290.1","v1.290.3","v1.277.2","v1.291.0","v1.287.0","v1.290.2","v1.289.1","v1.290.0","self-hosted-v18.8.0-ee","v1.240.0","self-hosted-v18.7.0-ee","v1.289.0","v1.284.2","v1.287.1","v1.284.3","v1.286.0","v1.285.0","v1.284.1","v1.284.0","v1.283.2","v1.283.1","v1.282.0","v1.283.0","v1.277.0","v1.281.0","v1.280.0","v1.279.0","v1.275.0","v1.277.1","v1.278.1","v1.278.0","v1.273.2","v1.276.0","v1.274.1","v1.274.0","v1.273.3","v1.272.0","v1.268.0","v1.273.1","v1.273.0","v1.271.0","v1.265.2","v1.270.1","v1.270.0","v1.269.1","v1.269.0","v1.267.1","v1.267.0","v1.262.3","v1.266.0","v1.265.1","v1.262.1","v1.265.0","v1.264.0","v1.263.0","v1.258.0","v1.259.2","v1.262.2","v1.262.0","v1.261.2","v1.261.1","v1.261.0","v1.259.0","v1.260.0","v1.259.1","v1.256.0","v1.257.0","v1.249.0","v1.255.1","v1.252.0","v1.255.0","v1.249.4","v1.254.1","v1.254.0","v1.253.2","v1.253.0","v1.253.1","v1.251.0","v1.250.0","v1.249.3","self-hosted-v18.6.0-ee","v1.249.2","v1.248.0","v1.249.1","v1.243.2","v1.248.1","v1.247.1","v1.247.0","v1.246.0","v1.245.0","v1.244.0","v1.241.0","v1.243.1","v1.243.0","v1.242.0","v1.232.3","v1.240.1","v1.237.1","v1.239.0","v1.237.2","v1.232.4","v1.238.0","v1.235.0","v1.236.0","v1.230.2","v1.237.0","v1.234.0","v1.233.0","v1.232.2","v1.226.2","v1.232.0","v1.232.1","v1.229.1","v1.231.0","v1.229.0","v1.230.1","v1.230.0","v1.228.0","v1.228.1","v1.227.2","v1.227.1","v1.218.1","v1.227.0","v1.226.1","v1.225.0","v1.224.0","v1.226.0","v1.223.0","v1.220.0","v1.222.0","v1.221.0","v1.219.0","v1.218.0","v1.217.0","v1.216.0","v1.215.0","v1.209.4","v1.214.0","v1.213.0","v1.212.1","v1.211.0","v1.212.0","v1.210.0","v1.202.0","v1.209.3","v1.195.2","v1.209.2","v1.208.0","v1.209.1","v1.200.1","v1.209.0","v1.208.1","v1.195.1","v1.207.0","v1.203.0","v1.203.1","v1.206.0","v1.205.0","v1.201.0","v1.204.0","v1.201.1","v1.200.2","v1.200.0","v1.198.1","v1.191.3","v1.199.0","v1.197.0","v1.198.0","v1.196.2","v1.196.1","v1.196.0","v1.185.0","v1.193.0","v1.192.2","v1.195.0","v1.194.0","v1.186.1","v1.192.1","v1.192.0","v1.187.0","v1.191.2","v1.191.1","v1.189.1","v1.191.0","v1.190.0","v1.190.1","v1.189.0","v1.188.0","v1.177.0","v1.176.0","v1.186.2","v1.186.0","v1.184.1","v1.179.0","v1.184.0","v1.183.1","v1.183.0","v1.182.0","v1.181.0","v1.180.0","v1.179.1","v1.178.0","v1.173.6","v1.175.0","v1.174.1","v1.174.0","v1.173.3","v1.173.5","v1.171.0","v1.173.4","v1.173.1","self-hosted-v18.5.0-ee","v1.173.2","v1.173.0","v1.164.1","v1.172.0","v1.169.0","v1.166.0","v1.170.0","v1.167.0","v1.168.0","v1.164.0","v1.165.1","v1.165.0","v1.163.1","v1.159.0","v1.163.0","v1.162.0","v1.158.0","v1.157.1","v1.161.0","v1.160.0","v1.159.1","v1.153.0","v1.157.5","v1.157.4","v1.155.0","v1.157.3","v1.157.0","v1.157.2","v1.156.1","v1.156.0","v1.154.0","v1.152.0","v1.151.0","v1.150.0","v1.149.3","v1.149.4","v1.149.2","v1.149.1","v1.149.0","v1.148.1","v1.148.0","v1.147.0","v1.146.1","v1.138.0","v1.146.0","v1.145.0","v1.144.0","v1.143.2","v1.143.1","v1.143.0","v1.132.1","v1.142.0","v1.142.1","v1.140.0","v1.141.0","v1.140.2","v1.140.1","v1.136.0","v1.139.0","v1.133.0","v1.137.0","v1.135.1","v1.134.0","v1.135.0","v1.95.0","v1.130.1","v1.132.2","v1.122.3","v1.132.0","v1.131.0","v1.130.0","v1.129.0","v1.128.0","v1.124.0","v1.126.2","v1.127.0","v1.126.1","v1.126.0","v1.125.0","v1.119.0","v1.123.0","v1.122.4","v1.122.2","v1.42.2","self-hosted-v18.2.6-ee","self-hosted-v18.1.6-ee","v1.122.1","v1.122.0","v1.121.0","v1.118.1","v1.120.1","v1.118.0","v1.120.0","v1.117.1","v1.116.0","v1.117.0","v1.110.1","v1.115.1","v1.102.0","v1.115.0","v1.114.2","v1.113.0","v1.114.1","v1.114.0","v1.113.1","v1.112.0","v1.109.0","v1.111.0","v1.105.0","v1.110.0","v1.103.0","v1.107.0","v1.108.0","v1.106.0","v1.104.0","v1.102.1","v1.101.4","v1.101.1","v1.101.3","v1.101.2","v1.101.0","v1.100.0","v1.99.1","v1.99.0","v1.98.0","v1.97.0","v1.94.0","v1.91.0","v1.96.0","v1.94.1","v1.87.0","v1.93.0","v1.92.0","self-hosted-v18.2.8-ee","v1.90.0","v1.89.1","v1.75.0","v1.89.0","v1.88.0","v1.86.0","v1.81.3","v1.86.1","v1.85.0","v1.84.1","v1.81.2","v1.84.0","v1.82.0","v1.83.0","v1.74.0","v1.81.4","v1.79.0","v1.76.0","v1.81.1","v1.81.0","v1.78.0","v1.80.0","v1.77.0","v1.77.2","v1.74.2","v1.77.1","v1.75.1","v1.74.1","v1.73.0","v1.72.0","v1.72.4","v1.72.3","v1.72.2","v1.71.0","self-hosted-v18.2.7-ee","v1.72.1","v1.70.0","v1.65.1","v1.69.0","v1.68.1","v1.68.0","v1.67.0","v1.66.0","v1.65.0","v1.52.0","self-hosted-v18.4.0-ee","v1.64.0","v1.55.0","v1.63.0","v1.62.0","v1.61.0","v1.60.0","v1.59.0","v1.52.1","v1.58.0","v1.57.0","v1.56.0","v1.54.0","v1.53.2","v1.53.1","v1.48.0","v1.53.0","v1.52.2","v1.51.2","v1.51.1","v1.51.0","v1.50.0","v1.47.1","v1.49.0","v1.47.0","v1.47.2","v1.46.0","v1.44.0","v1.45.0","v1.44.1","v1.42.3","v1.43.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90970.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}]}