Vulnerability in GitLab AI Gateway Allows Credential Disclosure via Redirect
CVE-2026-19889

8.2HIGH

Key Information:

Vendor

Gitlab
Status
Gitlab Ai Gateway
Vendor
CVE Published:
27 August 2026

What is CVE-2026-19889?

A vulnerability in the GitLab AI Gateway component allows an authenticated user with Duo Agent Platform access to alter model requests, potentially redirecting them to malicious endpoints. This weakness arises from improperly handled model metadata, leading to the exposure of sensitive credentials from cloud services, such as Google Vertex AI and AWS Bedrock. Users are encouraged to review their configurations and update to the patched versions for enhanced security.

Affected Version(s)

GitLab AI Gateway 18.9 < 19.0.12

GitLab AI Gateway 19.1 < 19.1.7

GitLab AI Gateway 19.2 < 19.2.2

References

https://gitlab.com/gitlab-org/gitlab/-/work_items/614164
https://hackerone.com/reports/3938027
technical-descriptionexploitpermissions-required

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Thanks [kyyblin](https://hackerone.com/kyyblin) for reporting this vulnerability through our HackerOne bug bounty program
.