CVE-2026-19889

Name of the Vulnerable Software and Affected Versions GitLab AI Gateway versions 18.9.0 through 19.0.12 GitLab AI Gateway versions 19.1 through 19.1.7 GitLab AI Gateway versions 19.2 through 19.2.2

Description An issue in the AI Gateway component allows an authenticated user with Duo Agent Platform access to redirect model requests to an externally-controlled endpoint. This is achieved by using crafted model metadata, which can lead to the disclosure of AWS Bedrock or Google Vertex AI cloud service credentials.

Recommendations Update GitLab AI Gateway versions 18.9.0 through 19.0.12 to a version newer than 19.0.12. Update GitLab AI Gateway versions 19.1 through 19.1.7 to a version newer than 19.1.7. Update GitLab AI Gateway versions 19.2 through 19.2.2 to a version newer than 19.2.2.