Tuesday, October 6, 2026 · 2 of 5

1. GitLab patches CVSS 9.9 sandbox escape (CVE-2026-90970) in the self-hosted AI Gateway; updating core GitLab does NOT fix it

   Oct 2–5Security