CVEFinder.io

CVE-2026-75871

⚠ī¸ high
🔍 Scan for this CVE
Summary

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an externally-controlled endpoint via a crafted inline flow configuration that overrides the HTTP Host header, resulting in disclosure of Google Cloud Vertex cloud service credentials and private signing keys.

CVSS Score
8.2
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-08-27
First Seen: 2026-08-28
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 79.1% of all 364,858 vulnerabilities in our database.

#76,201
Top 25% most severe
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Aug 27, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
Thanks [kyyblin](https://hackerone.com/kyyblin) for reporting this vulnerability through our HackerOne bug bounty program
SSVC data provided by CISA
Last Modified 2026-09-01
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CWE IDs (Weakness Types)
CWE-918

đŸ“Ļ Affected Products 3

Vendor Product Status Affected Versions
gitlab gitlab Affected
> 18.10.0 < 19.0.12
gitlab gitlab Affected
> 19.1.0 < 19.1.7
gitlab gitlab Affected
> 19.2.0 < 19.2.2

🔗 References 2

https://gitlab.com/gitlab-org/gitlab/-/work_items/61...
Broken Link
https://hackerone.com/reports/3945100
Broken Link

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-10518 đŸ”ļ medium 4.3 0.3 GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4... 2026-09-29
CVE-2026-4523 ℹī¸ low 3.7 0.4 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and ... 2026-09-29
CVE-2026-84739 ⚠ī¸ high 8.7 0.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and ... 2026-09-29
CVE-2026-8937 đŸ”ļ medium 4.3 0.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 1... 2026-09-29
CVE-2026-89078 ⛔ critical 9.9 0.4 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 1... 2026-09-24
CVE-2026-92470 ⚠ī¸ high 7.7 0.2 GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4... 2026-09-24
These CVEs affect the same products