https://vulnerability.circl.lu/sightings/feed 2026-10-05T15:21:23.347243+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c627f540-b58c-45af-80bf-ba3310d5f737/export 2026-10-05T15:21:23.368589+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c627f540-b58c-45af-80bf-ba3310d5f737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx524qu3pi26", "content": "\ud83d\udd17 CVE : CVE-2026-90970", "creation_timestamp": "2026-10-05T13:40:12.564003Z"} 2026-10-05T13:40:12.564003+00:00 https://vulnerability.circl.lu/sighting/cdb2814c-937c-4c6d-8dba-19dc02c2c736/export 2026-10-05T15:21:23.370529+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cdb2814c-937c-4c6d-8dba-19dc02c2c736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/CyberSecurityIL/9583", "content": "\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-AI Gateway \u05e9\u05dc\u05d4, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-90970 \u05e2\u05dd CVSS 9.9 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d4\u05ea\u05e7\u05e0\u05d5\u05ea Self-Hosted \u05e9\u05dc GitLab AI Gateway. \n\n\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05e4\u05e8\u05e1\u05de\u05d4 \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 19.2.4, 19.3.2 \u05d5-19.4.1. \n\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05e9\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1-AI Gateway \u05de\u05e0\u05d5\u05d4\u05dc \u05dc\u05d0 \u05e0\u05d3\u05e8\u05e9\u05d9\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05df.\n\nhttps://t.me/CyberSecurityIL/9583", "creation_timestamp": "2026-10-05T09:38:06.000000Z"} 2026-10-05T09:38:06+00:00 https://vulnerability.circl.lu/sighting/d0b8cf7a-fec4-4780-954c-7df607104927/export 2026-10-05T15:21:23.370676+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d0b8cf7a-fec4-4780-954c-7df607104927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/CyberSecurityIL/87661", "content": "\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-AI Gateway \u05e9\u05dc\u05d4, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-90970 \u05e2\u05dd CVSS 9.9 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d4\u05ea\u05e7\u05e0\u05d5\u05ea Self-Hosted \u05e9\u05dc GitLab AI Gateway. \n\n\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05e4\u05e8\u05e1\u05de\u05d4 \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 19.2.4, 19.3.2 \u05d5-19.4.1. \n\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05e9\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1-AI Gateway \u05de\u05e0\u05d5\u05d4\u05dc \u05dc\u05d0 \u05e0\u05d3\u05e8\u05e9\u05d9\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05df.\n\nhttps://t.me/CyberSecurityIL/9583", "creation_timestamp": "2026-10-05T09:38:06.000000Z"} 2026-10-05T09:38:06+00:00 https://vulnerability.circl.lu/sighting/846441c3-8643-4d9d-b43f-1cd06fd65068/export 2026-10-05T15:21:23.370786+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "846441c3-8643-4d9d-b43f-1cd06fd65068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/Russian_OSINT/8003", "content": "\u2757\ufe0fGitLab \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u2194\ufe0fCVSS 9,9 \u0432 \u0418\u0418-\u0448\u043b\u044e\u0437\u0435 \u0434\u043b\u044f Duo\n\n\u0412 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 GitLab AI Gateway \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-90970, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0443 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 9,9 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0443 CWE \u043a\u0430\u043a CWE-1336. \u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a GitLab Duo Agent Platform, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u043f\u0440\u043e\u043c\u043f\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e\u0442\u043e\u043a\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 GitLab AI Gateway.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 GitLab AI Gateway \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 19.2.4, 19.3.2, 19.4.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u043e\u0439.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-10-05T08:00:17.000000Z"} 2026-10-05T08:00:17+00:00 https://vulnerability.circl.lu/sighting/b5bca28e-f033-44f1-b839-59644bca9d73/export 2026-10-05T15:21:23.370908+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b5bca28e-f033-44f1-b839-59644bca9d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/densuke.bsky.social/post/3mx3xhtjmx322", "content": "\u66f4\u65b0\u3055\u308c\u305f\u3088\u3001\u898b\u306b\u6765\u3066\u306d!\u2192 \n\nAI \u306e\u8db3\u5143\u306b\u53e4\u5178\u7684\u306a\u7a74? GitLab AI Gateway CVE-2026-90970\u30fbZammad\u30fbZig 0.17\u30fbUbuntu 26.10 Sequoia PGP\u30fbArm TLBI Domains\uff082026/10/5 Linux\u30fbOSS\u30c8\u30ec\u30f3\u30c9\uff09 https://blog.fuga.jp/posts/2026-10-05-linux-oss-trend/", "creation_timestamp": "2026-10-05T03:20:06.987830Z"} 2026-10-05T03:20:06.987830+00:00 https://vulnerability.circl.lu/sighting/695074bc-7cf3-4816-a333-8ed886d1c9d2/export 2026-10-05T15:21:23.371007+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "695074bc-7cf3-4816-a333-8ed886d1c9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mx3met2er22g", "content": "GitLab AI Gateway\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff1aCVE-2026-90970 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-10-05T00:01:33.167647Z"} 2026-10-05T00:01:33.167647+00:00 https://vulnerability.circl.lu/sighting/8512b584-067d-468b-9017-7b11fd790689/export 2026-10-05T15:21:23.371105+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8512b584-067d-468b-9017-7b11fd790689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mx2lvy3mrc24", "content": "CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed\n\nGitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab has released patches for a critical vulnerability in its AI Gateway, tra\u2026\n#hackernews #news", "creation_timestamp": "2026-10-04T14:20:33.888308Z"} 2026-10-04T14:20:33.888308+00:00 https://vulnerability.circl.lu/sighting/c9819785-516c-4049-8960-9f0b95e4b4e0/export 2026-10-05T15:21:23.371201+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c9819785-516c-4049-8960-9f0b95e4b4e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/mohith808.bsky.social/post/3mx24jqmc5q2n", "content": "POV: you shipped an AI gateway\n\nthe prompt template: \"hi {{name}}\"\n\na logged in user with a crafted flow config: \"what if i was a shell\"\n\ngitlab patched a CVSS 9.9 prompt template sandbox escape in its self-hosted AI gateway (CVE-2026-90970). update to 19.2.4, 19.3.2 or 19.4.1", "creation_timestamp": "2026-10-04T09:45:16.983657Z"} 2026-10-04T09:45:16.983657+00:00 https://vulnerability.circl.lu/sighting/ec0fbb81-55c0-42ca-a1eb-41418c6d6ffd/export 2026-10-05T15:21:23.371298+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ec0fbb81-55c0-42ca-a1eb-41418c6d6ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-88722365-ffb8ec69f9595621", "content": "A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Fake Zoom installer hides macOS backdoor CloudSyncD CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed Antino Backdoor Lets [\u2026]Security Affairs newsletter Round 598 by Pierluigi Paganini \u2013 INTERNATIONAL EDITION - Security Affairs", "creation_timestamp": "2026-10-04T09:03:29.255526Z"} 2026-10-04T09:03:29.255526+00:00 https://vulnerability.circl.lu/sighting/de42eb64-2b6a-463e-8b7e-cc2ee31ad94b/export 2026-10-05T15:21:23.371392+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "de42eb64-2b6a-463e-8b7e-cc2ee31ad94b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/johnwlittle.com/post/3mwzvw3puegpj", "content": "GitLab urges self-hosted AI Gateway users to patch a critical command-execution flaw (CVE-2026-90970). Fixed versions: 19.2.4, 19.3.2, 19.4.1. GitLab-hosted gateways are already protected.\nhttps://docs.gitlab.com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/", "creation_timestamp": "2026-10-04T07:47:37.168518Z"} 2026-10-04T07:47:37.168518+00:00