Share story
Security AI

GitLab fixes command-execution flaw in self-hosted AI Gateway

GitLab fixes command-execution flaw in self-hosted AI Gateway Image: Primary
GitLab disclosed a critical AI Gateway vulnerability on October 2 that could let a logged-in user with Duo Agent Platform access execute commands on the gateway under certain conditions. The Hacker News reports that fixes are available in gateway versions 19.2.4, 19.3.2 and 19.4.1. A specially crafted workflow configuration could escape the sandbox used for prompt templates. GitLab urges organizations hosting their own gateway to update immediately; its customer gateways are already patched. CISA lists exploitation as "none." No fixed version is listed for the affected releases below 19.2.4, and the advisory provides no workaround.
Sources
The Hacker News
In this story
US Government
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Robotics Capital
Robotics Capital

Fortem raises $50 million with Lockheed Martin participating

Counter-drone company Fortem has raised $50 million in Series B funding, with Lockheed Martin participating, Bloomberg reported. Fortem is seeking to expand manufacturing and bookings rapidly. CEO Jon Gruen said its relationship w...

Bloomberg Technology
AI Infrastructure
AI Infrastructure

Broadcom syndicate seeks $60 billion for AI chip financing

Broadcom's Wall Street syndicate is starting to gather $60 billion in fresh AI chip financing, Bloomberg reported, citing sources. The financing effort would help Anthropic and other companies access chips and other infrastructure...

Techmeme
Infrastructure Products
Infrastructure Products

Rocket Lab signs 20-launch agreement with Synspective

Rocket Lab signed a 20-mission Electron launch agreement with Japanese radar satellite operator Synspective, Ars Technica reported, citing Aviation Week & Space Technology. Rocket Lab calls it its largest Electron launch service a...

Ars Technica
AI Capital
AI Capital

Halluminate raises $30M for AI financial training environments

Halluminate raised a $30M Series A led by Oak HC/FT, bringing its total funding to $38.5M, Fortune reported. The nine-person San Francisco startup builds environments for training AI to perform complex financial work, giving the f...

Techmeme
AI Infrastructure
AI Infrastructure

OpenAI deploys Jalapeño chips with AMD Turin host processors

OpenAI is deploying its Jalapeño custom AI chips internally alongside AMD EPYC Turin host processors, each with 1.5TB of memory, Tom's Hardware reported. OpenAI hardware chief Richard Ho said the company chose Turin to reduce depl...

Tom's Hardware