CVE-2026-75871

Name of the Vulnerable Software and Affected Versions GitLab AI Gateway versions 18.10 through 19.0.12 GitLab AI Gateway versions 19.1 through 19.1.7 GitLab AI Gateway versions 19.2 through 19.2.2

Description An authenticated user with Duo Agent Platform access can redirect outbound model requests to an externally-controlled endpoint. This is achieved through a crafted inline flow configuration that overrides the HTTP Host header, which can lead to the disclosure of private signing keys and Google Cloud Vertex cloud service credentials.

Recommendations Update GitLab AI Gateway versions 18.10 through 19.0.12 to a version newer than 19.0.12. Update GitLab AI Gateway versions 19.1 through 19.1.7 to a version newer than 19.1.7. Update GitLab AI Gateway versions 19.2 through 19.2.2 to a version newer than 19.2.2.