CVE-2026-1868 (CVSS 9.9) Exploits GitLab AI Gateway for RCE

Back Purple-Ops

CVE-2026-1868 (CVSS 9.9) Exploits GitLab AI Gateway for RCE

Purple-Ops • February 9, 2026

Share: View original

Protect against CVE-2026-1868 in GitLab's AI Gateway. Learn how RCE risk impacts devops and how to respond quickly.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GitLab Gateway Flaw CVE-2026-1868 Allows RCE GitLab has patched a critical vulnerability identified as CVE-2026-1868, which has a CVSS score of 9.9. This flaw affects the self-hosted AI Gateway, allowing remote code execution (RCE) through insecure templates. Users of GitLab's self-hosted solutions are advised to apply the patch immediately. 4 sources 73

Extracted Entities

Attack Types (1)

Remote Code Execution

CVEs (1)

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application

Platforms (2)

Gitlab GitLab AI Gateway