CVE-2026-1868 (CVSS 9.9) Critical GitLab AI Gateway RCE Flaw

Back Purple-Ops

CVE-2026-1868 (CVSS 9.9) Critical GitLab AI Gateway RCE Flaw

Purple-Ops • February 9, 2026

Share: View original

CVE-2026-1868 exposes GitLab AI Gateway to critical remote code execution . Learn how to patch and detect threats before they escalate.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GitLab Gateway Flaw CVE-2026-1868 Allows RCE GitLab has patched a critical vulnerability identified as CVE-2026-1868, which has a CVSS score of 9.9. This flaw affects the self-hosted AI Gateway, allowing remote code execution (RCE) through insecure templates. Users of GitLab's self-hosted solutions are advised to apply the patch immediately. 4 sources 73

Extracted Entities

CVEs (1)