Plan
archived
GitLab critical RCE in AI Gateway service — patch urged
- Engineer — Plan: GitLab AI Gateway RCE is vendor-rated critical and affects a widely deployed DevOps component, but no KEV, public PoC, or active exploitation is confirmed. Schedule patching to the latest fixed GitLab version this sprint and verify AI Gateway is not exposed to untrusted networks until patched.
- SOC/IR — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.