{"data":{"id":"9d5bb706-3999-451b-b6b6-3c96ef4a701d","title":"CVE-2026-75871: GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 1","summary":"GitLab fixed a vulnerability in the GitLab AI Gateway (a component that manages AI requests) that affected versions 18.10 through 19.2.2. An authenticated user could exploit this by crafting a malicious configuration to redirect AI model requests to an external server they control, potentially stealing Google Cloud credentials and private signing keys (secret authentication material).","solution":"Update to GitLab AI Gateway version 19.0.13 or later, 19.1.8 or later, or 19.2.3 or later, depending on which version line you are running.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-75871","publishedAt":"2026-08-27T17:20:01.503Z","cveId":"CVE-2026-75871","cweIds":["CWE-918"],"cvssScore":"8.2","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Google"],"affectedVendorsRaw":["GitLab","GitLab AI Gateway","Google Cloud Vertex"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-27T17:20:01.503Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}