CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE

Back X

CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE

X • February 8, 2026

Share: View original

Gray Hats (@the_yellow_fall). 135 views. GitLab patches critical flaw CVE-2026-1868 ( CVSS 9.9) in self-hosted AI Gateway.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GitLab Gateway Flaw CVE-2026-1868 Allows RCE GitLab has patched a critical vulnerability identified as CVE-2026-1868, which has a CVSS score of 9.9. This flaw affects the self-hosted AI Gateway, allowing remote code execution (RCE) through insecure templates. Users of GitLab's self-hosted solutions are advised to apply the patch immediately. 4 sources 73

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (2)

GitLab Gateway Self-hosted AI Gateway