Plan
active
GitLab AI Gateway Critical RCE Flaw Fixed (Self-Hosted Only)
- Engineer — Plan: If you self-host the GitLab AI Gateway with Duo Agent Platform enabled, this is a real code-execution risk — upgrade to 19.2.4, 19.3.2, or 19.4.1. No public PoC or active exploitation reported, so this fits a near-term sprint rather than an emergency rollout.
- SOC/IR — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.