Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1. The flaw
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
Giulia

Giulia

1h ago
0 0

Discussion

Get the discussion rolling

A single comment can start something great.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
OpenAI Parts Ways With Three Safety Researchers Over Sensitive …

OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street Journal re…
TN

The Hacker News

4h ago
0
thehackernews.com
Android 17 Advanced Protection Locks Accessibility Services to …

Google has announced a new security measure that limits access to Android's accessibility services to verified applications classified as Accessibility Tools w…
Carlos the great

Carlos the great

7h ago
0
thehackernews.com
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Un…

The U. S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploi…
TN

The Hacker News

11h ago
0
bleepingcomputer.com
Fortinet warns of critical FortiMail flaw exploited in zero-day…

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execut…
Giulia

Giulia

17h ago
0
darkreading.com
Alleged KillSec Ransomware Mastermind a 16-Year-Old

Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years.
DR

Dark Reading

19h ago
0
thehackernews.com
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize R…

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organi…
JA

jordan af

20h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
OpenAI Parts Ways With Three Safety Researchers Over Sensitive …

OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street Journal re…
TN

The Hacker News

4h ago
0
thehackernews.com
Android 17 Advanced Protection Locks Accessibility Services to …

Google has announced a new security measure that limits access to Android's accessibility services to verified applications classified as Accessibility Tools w…
Carlos the great

Carlos the great

7h ago
0
thehackernews.com
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Un…

The U. S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploi…
TN

The Hacker News

11h ago
0
thehackernews.com
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize R…

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organi…
JA

jordan af

20h ago
0
thehackernews.com
How Financial Services Companies Can Modernize Their Software S…

Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engi…
MB

Maria Bakker

1d ago
0
thehackernews.com
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth P…

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under…
TN

The Hacker News

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest