CVE-2026-1868

CRITICAL

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 i...

Affects 0 products across 3 vendors.

BCS6.19
CVSS 3.19.9
EPSS0.5%
Percentile40th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-1336: CWE-1336
◆ SAGE Intelligence — CITED Relevance Research Team

GitLab has addressed a critical vulnerability in the Duo Workflow Service component of GitLab AI Gateway, affecting specific versions. The vulnerability involves insecure template expansion, which could lead to Denial of Service or unauthorized access.

BSID: BS-2026-GLOBAL-275953-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-1868?
GitLab has addressed a critical vulnerability in the Duo Workflow Service component of GitLab AI Gateway, affecting specific versions. The vulnerability involves insecure template expansion, which could lead to Denial of Service or unauthorized access.
What is the CVSS score for CVE-2026-1868?
CVE-2026-1868 has CVSS 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 0.5%.
Is CVE-2026-1868 actively exploited?
No confirmed active exploitation of CVE-2026-1868 as of 2026-05-30.
How do I remediate CVE-2026-1868?
Priority: IMMEDIATE.
What systems are affected by CVE-2026-1868?
CVE-2026-1868 affects: Gateway, Gitlab, Platform.
Vulnerability Details
CVE IDCVE-2026-1868
BSIDBS-2026-GLOBAL-275953-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2026-02-09
Last Modified2026-04-15
ICS Relevance0%
Weakness (CWE)
CWE-1336
Domains
CLOUD
SourceNVD
Official Description

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which AI Gateway was vulnerable to insecure template expansion of user supplied data via crafted Duo Agent Platform Flow definitions. This vulnerability could be used to cause Denial of Service or gain code execution on the Gateway. This has been fixed in versions 18.6.2, 18.7.1, and 18.8.1 of the GitLab AI Gateway.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability arises from the insecure expansion of user-supplied data in Duo Agent Platform Flow definitions, allowing attackers to craft malicious inputs that could exploit the system.

Exploitation Likelihood: HIGH

Affected Products
VendorProductFixed Version
Gateway — —
Gitlab — —
Platform — —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: August 2026 | Threat Age: 179 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash5cebcadaa594ea7cf016ef9a7ecebd1846ec8110d4634aadffcb676de10642b75ae9c9923aeb92b6723384d175672def9707364fb4aa4bb3123a7c9b52c0a6bf
Related CVEs affecting Gateway
CVE-2024-50494 10.0 Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Su... CVE-2025-41243 10.0 Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment p... CVE-2002-1440 10.0 The Gateway GS-400 server has a default root password of "0001n" that can not... CVE-2025-58083 10.0 General Industrial Controls Lynx+ Gateway  is missing critical authenticatio... CVE-2026-32621 9.9 Apollo Federation is an architecture for declaratively composing APIs into a ...
View all Gateway CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →