Saturday, October 3, 2026 · 1 of 5

1. Critical GitLab AI Gateway flaw (CVE-2026-90970, CVSS 9.9) patched — self-hosted Duo Agent Platform sandbox escape

   Oct 2Security