Share story
Security AI

GitLab fixes command-execution flaw in self-hosted AI Gateway

GitLab fixes command-execution flaw in self-hosted AI Gateway Image: Primary
GitLab disclosed a critical AI Gateway vulnerability on October 2 that could let a logged-in user with Duo Agent Platform access execute commands on the gateway under certain conditions. The Hacker News reports that fixes are available in gateway versions 19.2.4, 19.3.2 and 19.4.1. A specially crafted workflow configuration could escape the sandbox used for prompt templates. GitLab urges organizations hosting their own gateway to update immediately; its customer gateways are already patched. CISA lists exploitation as "none." No fixed version is listed for the affected releases below 19.2.4, and the advisory provides no workaround.
Sources
The Hacker News
In this story
US Government
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital AI
Capital AI

Nevis raises $70M with Schwab joining wealth software investors

Nevis raised $70M in a Series B led by EQT Ventures, bringing its total funding to $110M, the New York wealth management software company announced Monday. Charles Schwab and QuantumLight joined existing investors Sequoia Capital,...

The Next Web
Robotics Capital
Robotics Capital

Bedrock Robotics raises $600M at a $4.1B valuation

Bedrock Robotics raised a $600M Series C at a $4.1B valuation, Bloomberg reported. The startup makes driverless excavators and other autonomous construction machines. The financing adds capital to a company developing autonomous ...

Techmeme
Capital
Capital

Matiks raises $10 million to expand puzzle games and game creation

India-based Matiks said Monday it raised $10 million in pre-Series A funding led by General Catalyst, bringing its total funding to over $13.5 million. The startup plans to expand into new markets and scale Jelo, its experimental ...

TechCrunch
AI Products
AI Products

AWS makes GPT-6.1 Terra generally available on Bedrock

AWS announced general availability of OpenAI's GPT-6.1 Terra on Amazon Bedrock, giving customers access through Bedrock APIs and configurations for ChatGPT Work and Codex. The model accepts text and images and supports up to 1 mil...

Recent Announcements
AI
AI

OpenAI releases GPT-6.1 Terra at $1 per million input tokens

OpenAI has released GPT-6.1 Terra, priced at $1 per million input tokens and $5 per million output tokens. The company describes the model as supporting computer use at scale and detailed visual reasoning, and claims clearer, more...

Techmeme