GitLab AI Gateway critical RCE allows arbitrary command execution

Affected Systems

GitLab AI Gateway service. Specific affected versions not disclosed in available information. Impacts organizations running GitLab instances with AI Gateway enabled.

Exploitation Status

No CVE assigned yet. Active exploitation status unknown. GitLab has issued urgent patching guidance, suggesting high exploitability or active threat intelligence.

Business Impact

Attackers can execute arbitrary commands on vulnerable GitLab AI Gateway instances, potentially leading to full system compromise, data exfiltration, lateral movement, or supply chain attacks via source code manipulation. Critical severity indicates low complexity or no authentication required. Organizations using GitLab's AI features are at immediate risk.

Urgency

🔴 Immediate

Recommended Actions

• Immediately patch all GitLab AI Gateway instances to the latest version per GitLab's security advisory
• Identify all GitLab instances with AI Gateway enabled using asset inventory and configuration management
• Review GitLab access logs and AI Gateway service logs for suspicious command execution or unauthorized access attempts
• If immediate patching is not possible, disable AI Gateway service temporarily until patches can be applied
• Monitor GitLab security advisories for CVE assignment and additional technical details including affected version ranges