CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE - Daily CyberSecurity •

Back Securityonline.Info

CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE - Daily CyberSecurity •

Securityonline.Info • February 8, 2026

Share: View original

GitLab patches critical flaw CVE-2026-1868 (CVSS 9.9) in self-hosted AI Gateway. Vulnerability allows RCE via insecure templates.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GitLab Gateway Flaw CVE-2026-1868 Allows RCE GitLab has patched a critical vulnerability identified as CVE-2026-1868, which has a CVSS score of 9.9. This flaw affects the self-hosted AI Gateway, allowing remote code execution (RCE) through insecure templates. Users of GitLab's self-hosted solutions are advised to apply the patch immediately. 4 sources 73

Extracted Entities

Attack Types (1)

Remote Code Execution

CVEs (1)

Platforms (2)

AI Gateway Gitlab

Vulnerabilities (1)

GitLab Gateway Flaw