CVE-2026-75871
published 2026-08-27CVE-2026-75871: GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and…
PriorityP356critical9.6CVSS 3.1
AVNACLPRLUINSCCHIHAN
EPSS
0.19%
8.9th percentile
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an externally-controlled endpoint via a crafted inline flow configuration that overrides the HTTP Host header, resulting in disclosure of Google Cloud Vertex cloud service credentials and private signing keys.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | gitlab | >= 18.10.0 < 19.0.12 | 19.0.12 |
| gitlab | gitlab | >= 19.1.0 < 19.1.7 | 19.1.7 |
| gitlab | gitlab | >= 19.2.0 < 19.2.2 | 19.2.2 |
| gitlab | gitlab_ai_gateway | — | — |
| gitlab | gitlab_ai_gateway | >= 18.10 < 19.0.12 | 19.0.12 |
| gitlab | gitlab_ai_gateway | >= 19.1 < 19.1.7 | 19.1.7 |
| gitlab | gitlab_ai_gateway | >= 19.2 < 19.2.2 | 19.2.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an a
ghsa_unreviewed·2026-08-27
CVE-2026-75871 [HIGH] CWE-918 GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an a
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an externally-controlled endpoint via a crafted inline flow configuration that overrides the HTTP Host header, resulting in disclosure of Google Cloud Vertex cloud service credentials and private signing keys.
GitLab
Server-Side Request Forgery (SSRF) in GitLab AI Gateway
vendor_gitlab·2026-08-27·CVSS 8.2
CVE-2026-75871 [HIGH] CWE-918 Server-Side Request Forgery (SSRF) in GitLab AI Gateway
Server-Side Request Forgery (SSRF) in GitLab AI Gateway
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an externally-controlled endpoint via a crafted inline flow configuration that overrides the HTTP Host header, resulting in disclosure of Google Cloud Vertex cloud service credentials and private signing keys.
Affected products: GitLab AI Gateway
Affected versions: >=18.10, =19.1, =19.2, <19.2.2 (affected)
Solution: Upgrade to version 19.0.12, 19.1.7, 19.2.2, 19.3.0 or newer
Credit: Thanks [kyyblin](https://hackerone.com/kyyblin) for reporting this
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-27
Published