Source: bleepingcomputer.com
GitLab has issued an urgent warning to customers about a critical remote code execution (RCE) vulnerability affecting its AI Gateway service. The flaw could allow attackers to execute arbitrary commands on vulnerable GitLab instances. GitLab is urging all users to apply patches immediately to mitigate the risk. The vulnerability resides specifically in the AI Gateway component, which is part of GitLab's AI-powered features. No specific CVE identifier was mentioned in the article excerpt. The critical severity rating indicates a high risk of exploitation if left unpatched. Organizations running self-managed GitLab instances with AI Gateway enabled are particularly at risk.
