GitLab has warned customers to patch a critical vulnerability in its AI Gateway service after reporting that the flaw could allow arbitrary command execution on vulnerable instances.
The issue puts AI-adjacent infrastructure into the familiar high-priority patching category: teams should identify exposed AI Gateway deployments, apply the vendor fix, and review access and execution telemetry for unusual activity. Because the reported impact is remote command execution, exposure assessment should include reachable instances and their surrounding privileges.
What defenders should do
- Apply GitLab’s security update as soon as operationally possible.
- Inventory AI Gateway deployments and restrict unnecessary network reachability.
- Review logs for unexpected command execution and administrative changes.
Source: BleepingComputer, October 2, 2026