CVE-2026-1868
Awaiting Analysis Awaiting Analysis - Queue
Insecure Template Expansion in GitLab AI Gateway Enables Code Execution

Publication date: 2026-02-09

Last updated on: 2026-02-09

Assigner: GitLab Inc.

Description
GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which AI Gateway was vulnerable to insecure template expansion of user supplied data via crafted Duo Agent Platform Flow definitions. This vulnerability could be used to cause Denial of Service or gain code execution on the Gateway. This has been fixed in versions 18.6.2, 18.7.1, and 18.8.1 of the GitLab AI Gateway.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-09
Last Modified
2026-02-09
Generated
2026-06-16
AI Q&A
2026-02-09
EPSS Evaluated
2026-06-14
NVD
CVE-2026-1868
EUVD
EUVD-2026-6917
Affected Vendors & Products
Showing 13 associated CPEs
Vendor Product Version / Range
gitlab ai_gateway 18.1.6
gitlab ai_gateway 18.2.6
gitlab ai_gateway 18.3.1
gitlab ai_gateway 18.6.1
gitlab ai_gateway 18.7.0
gitlab ai_gateway From 18.1.6 (inc) to 18.8.0 (inc)
gitlab ai_gateway 18.6.2
gitlab ai_gateway 18.7.1
gitlab ai_gateway 18.8.1
gitlab ai_gateway From 18.1.6 (inc) to 18.6.2 (exc)
gitlab ai_gateway From 18.6.2 (inc) to 18.7.1 (exc)
gitlab ai_gateway From 18.7.1 (inc) to 18.8.1 (exc)
gitlab ai_gateway From 18.8.1 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1336 The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-1868 is a critical security vulnerability in the Duo Workflow Service component of the GitLab AI Gateway. It affects multiple versions of the AI Gateway prior to 18.6.2, 18.7.1, and 18.8.1. The vulnerability arises from insecure template expansion of user-supplied data via specially crafted Duo Agent Platform Flow definitions.

This flaw allows an attacker with authenticated access to the GitLab instance to exploit the AI Gateway by causing Denial of Service (DoS) or executing arbitrary code on the Gateway.

Impact Analysis

Exploitation of this vulnerability can have severe impacts including:

  • Denial of Service (DoS) on the GitLab AI Gateway, disrupting AI features and services.
  • Remote code execution on the AI Gateway, potentially allowing attackers to take control of the system.

Because the vulnerability affects confidentiality, integrity, and availability, it poses a critical risk to affected systems.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate this critical vulnerability in the GitLab AI Gateway Duo Workflow Service component, you should immediately upgrade your self-hosted GitLab AI Gateway installations to one of the patched versions: 18.6.2, 18.7.1, or 18.8.1.

Note that GitLab-hosted AI Gateway users, including GitLab.com and GitLab Dedicated customers, are not affected and do not need to take any action.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-1868. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart