{"uuid": "c9819785-516c-4049-8960-9f0b95e4b4e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/mohith808.bsky.social/post/3mx24jqmc5q2n", "content": "POV: you shipped an AI gateway\n\nthe prompt template: \"hi {{name}}\"\n\na logged in user with a crafted flow config: \"what if i was a shell\"\n\ngitlab patched a CVSS 9.9 prompt template sandbox escape in its self-hosted AI gateway (CVE-2026-90970). update to 19.2.4, 19.3.2 or 19.4.1", "creation_timestamp": "2026-10-04T09:45:16.983657Z"}