Sources (3)
- bleeping · bleeping
- hackernews · hackernews
- securityweek · securityweek
What this means for you — Security leader:Update self-hosted GitLab AI Gateway instances to 19.2.4, 19.3.2, or 19.4.1 immediately. Only organizations that run their own gateway are affected; SaaS GitLab users have nothing to do.
What this means for you — Lean IT orgs:If you self-host your own GitLab AI Gateway, update it to version 19.2.4, 19.3.2, or 19.4.1 right away. Most lean-IT teams use GitLab.com and can ignore this.
What this means for you — MSP:Check every client that self-hosts GitLab AI Gateway and update to 19.2.4, 19.3.2, or 19.4.1. All other clients are unaffected.
What this means for you — Researcher:GitLab disclosed a critical (9.9) RCE in self-hosted AI Gateway; fixed in 19.2.4, 19.3.2, 19.4.1. No technical mechanism has been disclosed.