CVE-2026-1868
Insecure Template Expansion in GitLab AI Gateway Enables Code Execution
Publication date: 2026-02-09
Last updated on: 2026-02-09
Assigner: GitLab Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Affected Vendors & Products
| Vendor | Product | Version |
|---|---|---|
| gitlab | ai_gateway | 18.1.6 |
| gitlab | ai_gateway | 18.2.6 |
| gitlab | ai_gateway | 18.3.1 |
| gitlab | ai_gateway | 18.6.1 |
| gitlab | ai_gateway | 18.7.0 |
| gitlab | ai_gateway | From 18.1.6 (inc) to 18.8.0 (inc) |
| gitlab | ai_gateway | 18.6.2 |
| gitlab | ai_gateway | 18.7.1 |
| gitlab | ai_gateway | 18.8.1 |
| gitlab | ai_gateway | From 18.1.6 (inc) to 18.6.2 (exc) |
| gitlab | ai_gateway | From 18.6.2 (inc) to 18.7.1 (exc) |
| gitlab | ai_gateway | From 18.7.1 (inc) to 18.8.1 (exc) |
| gitlab | ai_gateway | From 18.8.1 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1336 | The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-1868 is a critical security vulnerability in the Duo Workflow Service component of the GitLab AI Gateway. It affects multiple versions of the AI Gateway prior to 18.6.2, 18.7.1, and 18.8.1. The vulnerability arises from insecure template expansion of user-supplied data via specially crafted Duo Agent Platform Flow definitions.
This flaw allows an attacker with authenticated access to the GitLab instance to exploit the AI Gateway by causing Denial of Service (DoS) or executing arbitrary code on the Gateway.
How can this vulnerability impact me? :
Exploitation of this vulnerability can have severe impacts including:
- Denial of Service (DoS) on the GitLab AI Gateway, disrupting AI features and services.
- Remote code execution on the AI Gateway, potentially allowing attackers to take control of the system.
Because the vulnerability affects confidentiality, integrity, and availability, it poses a critical risk to affected systems.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate this critical vulnerability in the GitLab AI Gateway Duo Workflow Service component, you should immediately upgrade your self-hosted GitLab AI Gateway installations to one of the patched versions: 18.6.2, 18.7.1, or 18.8.1.
Note that GitLab-hosted AI Gateway users, including GitLab.com and GitLab Dedicated customers, are not affected and do not need to take any action.