First reported youtube.com
Lead dispatch
First reported · updated · 2 reports bleepingcomputer.com
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
GitLab patched CVE-2026-90970, a critical (CVSS 9.9) flaw in its self-hosted AI Gateway service powering GitLab Duo features. An authenticated user with Duo Agent Platform access could escape the prompt template sandbox via a specially crafted flow configuration, leading to arbitrary command execution on the AI Gateway. Fixes shipped in versions 19.2.4, 19.3.2, and 19.4.1; GitLab-hosted instances are already protected.sandbox-escape · remote-code-execution · prompt-injection · tool-abuse
ai-gateway · llm · gitlab-duo · ai-agents
Severity
0.82
The wire · latest
First reported arxiv.org
From Prompt Injection to Web Exploitation: Revisiting Classic Vulnerabilities in LLM-Integrated Applications
A research paper by Spiros Tsigkopoulos and Christoforos Ntantogian introduces "LLM-mediated web attacks," a class where attacker-controlled input is transformed by an LLM-integrated application and then reaches traditional web-app sinks, systematized as LLM2X variants (LLM2SQLi, LLM2XSS, LLM2SSTI, LLM2CommandInjection, LLM2IDOR, LLM2CSRF, LLM2XXE, LLM2SSRF). The authors implement TicketOracle, a Flask-based LLM-integrated app, to evaluate LLM2SSRF across five scenarios and seven LLMs, finding substantial model-specific variation in susceptibility. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector