CVE Intelligence
Analysis AI-assisted

CVE-2026-1868: GitLab AI Gateway Duo Workflow Service Insecure Template Expansion Vulnerability

GitLab fixed a critical vulnerability in the Duo Workflow Service component of GitLab AI Gateway, caused by insecure template expansion of user-supplied data in crafted Duo Agent Platform Flow definitions. According to the record, it could be used to cause denial of service or gain code execution on the Gateway. The record states fixes in versions 18.6.2, 18.7.1 and 18.8.1.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

GitLab has released fixes for CVE-2026-1868, a vulnerability in the Duo Workflow Service component of GitLab AI Gateway. The record classifies the weakness as CWE-1336 and describes insecure template expansion of user-supplied data contained in crafted Duo Agent Platform Flow definitions.

Impact

According to the record, the flaw could be used to cause denial of service or to gain code execution on the Gateway. The record gives a CVSS 3.1 base score of 9.9 (critical), with the vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, which rates confidentiality, integrity and availability impact as high.

Affected products and versions

The record describes the following AI Gateway versions as vulnerable:

  • Versions listed as 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0 and 18.8.0, as worded in the record

The record states that the following versions contain the fix:

  • 18.6.2
  • 18.7.1
  • 18.8.1

The structured affected and fixes fields in the record are empty, so the above comes only from the description text.

Exploitation status

The record shows that this CVE is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted for this analysis, so this entry should not be described as actively exploited.

Remediation and mitigation

  • Upgrade GitLab AI Gateway to a fixed version on the branch in use: 18.6.2, 18.7.1 or 18.8.1. See the GitLab patch release notes.
  • Until patching is complete, limit who can create or import Duo Agent Platform Flow definitions to trusted users, and review existing definitions for unexpected content.
  • Restrict network exposure of the Gateway so that only authorised components can reach it.

Detection guidance

  • Review Gateway and flow-management logs for unfamiliar flow definitions, abnormal template processing errors, and unexpected crashes or restarts of the Duo Workflow Service.
  • Monitor hosts running the Gateway for unusual process or resource activity.

Limitations of the available information

The record has no structured product or version data, no CWE name, and a source status of Deferred. The version range wording is ambiguous, so administrators should confirm exact affected builds with the vendor advisory. Affected status of branches not named in the record is unknown. The NVD entry is the primary consulted source for this summary.

Frequently asked questions

Is CVE-2026-1868 known to be actively exploited?

The record shows it is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted. This is not the same as proof that exploitation has never happened.

Which GitLab AI Gateway versions fix this issue?

The record states fixes in versions 18.6.2, 18.7.1 and 18.8.1. Administrators on other release branches should confirm the status with the vendor advisory.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.