GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

The Hacker News - Oct 2, 2026

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1. The flaw

Read full article

More News

A.I. Agents: Cute, Cuddly and Maybe Catastrophically Dangerous?

A.I. Agents: Cute, Cuddly and Maybe Catastrophically Dangerous?

“It’s going to be gnarly for a little while.”

Oct 2, 2026See more

Napoleon's code is cracked after 217 years: Scientist uses AI to read a mysterious letter written by the Emperor in 1809

Napoleon's code is cracked after 217 years: Scientist uses AI to read a mysterious letter written by the Emperor in 1809

A mysterious letter written by Napoleon Bonaparte has been decoded for the first time in more than 200 years.

Oct 2, 2026See more

Russia’s Latest Propaganda? A.I.-Generated War Songs.

Russia’s Latest Propaganda? A.I.-Generated War Songs.

Russians are creating and spreading music glorifying the invasion of Ukraine, using platforms built in the United States.

Oct 2, 2026See more

Pentagon clears way for anti-drone tech: Hegseth memo

Pentagon clears way for anti-drone tech: Hegseth memo

The memo instructs the department to treat delays in the employment of anti-drone technology as an "operational risk."

Oct 2, 2026See more

Nothing Phone (4a), Phone (4a) Pro, Phone (4b) get Flipkart Big Billion Days offers: Prices, bank discounts and more

Nothing has announced special Big Billion Days offers on the Phone (4a), Phone (4a) Pro and Phone (4b), with early access starting October 8. The Phone (4a) will get its...

Oct 2, 2026See more

Backshall makes nature 'cool' to inspire children

Backshall makes nature 'cool' to inspire children

Steve Backshall says growing up with rescue animals helped inspire his passion for nature.

Oct 2, 2026See more

What’s in a name? Why Trump wants to rebrand AI as ‘super intelligence’

What’s in a name? Why Trump wants to rebrand AI as ‘super intelligence’

US President Donald Trump wants to retire one of the technology sector’s most recognisable acronyms, arguing that the term “artificial intelligence”, or AI, is no longer fit for purpose. On Tuesday,...

Oct 2, 2026See more

Apple issues warning to iPhone users over 'sophisticated attack' hijacking devices

Apple issues warning to iPhone users over 'sophisticated attack' hijacking devices

Apple has told millions of iPhone users to act now after identifying a sophisticated attack plaguing devices.

Oct 2, 2026See more

Amazon Promises More Local Funding and Less Secrecy Around Data Centers

Amazon Promises More Local Funding and Less Secrecy Around Data Centers

The internet giant is the latest technology company trying to address increasingly hostile local sentiment toward data center projects.

Oct 2, 2026See more

Solar system may have a much shorter lifespan than we thought

Solar system may have a much shorter lifespan than we thought

Solar system may have a much shorter lifespan than we thought Scientists in a recent study have revealed a new expiration date for our solar system. A new study published...

Oct 2, 2026See more

The rover that could finally find life on Mars: I travelled to a remote desert in Spain to see ESA's £1billion Rosalind Franklin put to the test - and for a moment, I could have sworn I was on the Red Planet

The rover that could finally find life on Mars: I travelled to a remote desert in Spain to see ESA's £1billion Rosalind Franklin put to the test - and for a moment, I could have sworn I was on the Red Planet

Daily Mail's Wiliam Hunter travelled to the Tabernas Desert to see how ESA and Airbus are getting ready for what could be the most important mission in space exploration history.

Oct 2, 2026See more

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling

OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street Journal reported. "We have parted ways with...

Oct 2, 2026See more

Recommended