Project
GitLab's agentic AI platform, including Agentic Chat, the AI Catalog, and foundational agents such as Flow Creator.
GitLab has patched CVE-2026-90970, a CVSS 9.9 flaw that lets any authenticated Duo Agent Platform user run arbitrary commands on the AI Gateway server. Fixed releases are 19.2.4, 19.3.2 and 19.4.1 for self-hosted installs.
Reality
GitLab has fixed CVE-2026-90970, a CVSS 9.9 sandbox escape that lets an authenticated Duo Agent Platform user run commands on self-hosted AI Gateways. Anyone running one of those gateways needs build 19.2.4, 19.3.2 or 19.4.1, all released October 2, to close it.
Reality
GitLab patched CVE-2026-90970, a sandbox escape that lets any authenticated Duo Agent Platform user run arbitrary commands on a self-hosted AI Gateway. Customers on GitLab's hosted gateway are already protected, so the upgrade falls to Self-Managed shops that run their own.
Perspective Coverage
4 publishersReality
GitLab's v19.5 docs send AI reviews started by Duo Enterprise seat holders to the single-pass reviewer that reads only the merge request and its diffs. To check cross-file rules on every review, a group Owner has to move seat holders onto the credit-billed Code Review Flow.
Reality
Dedicated customers can now run Duo agents in their own single tenant and region with their own inference models, while Secrets Manager arrives in limited availability as a paid add-on.
Reality