CVE-2026-19889: GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 1
Summary
GitLab fixed a vulnerability in its AI Gateway component (a service that handles AI requests) affecting versions 18.9.0 through 19.2.2 that could let an authenticated user with Duo Agent Platform access redirect AI model requests to an outside server they control, potentially exposing cloud service credentials (login credentials for Google Vertex AI or AWS Bedrock).
Solution / Mitigation
Update to GitLab AI Gateway versions beyond 19.0.12 (for the 19.0 line), 19.1.7 (for the 19.1 line), or 19.2.2 (for the 19.2 line).
Vulnerability Details
8.2(high)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
network
high
low
none
August 27, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19889
First tracked: August 27, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 92%