CVE-2026-75871: CWE-918: Server-Side Request Forgery (SSRF) in GitLab GitLab AI Gateway
Description
A Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-75871) was found in the GitLab AI Gateway component affecting multiple versions from 18.10 through 19.2.2. This flaw allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to attacker-controlled endpoints by manipulating the HTTP Host header in inline flow configurations. Exploitation could lead to disclosure of sensitive Google Cloud Vertex service credentials and private signing keys. The vulnerability has a high severity score of 8.2 and affects the cloud-hosted GitLab AI Gateway service. GitLab has remediated this issue in their cloud environment.
CVSS v3.1
Score 8.2high
Affected software
GitLab
GitLab AI Gateway
cpe:2.3:a:gitlab:ai-gateway:*:*:*:*:*:*:*:*Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-75871 is a Server-Side Request Forgery vulnerability in GitLab AI Gateway that permits an authenticated user with Duo Agent Platform access to override the HTTP Host header via crafted inline flow configurations. This manipulation enables redirection of outbound model requests to external endpoints controlled by an attacker. The impact includes disclosure of Google Cloud Vertex service credentials and private signing keys. The affected versions include all AI Gateway versions from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2. The vulnerability is rated high severity with a CVSS score of 8.2. Since the AI Gateway is a cloud service, GitLab manages remediation server-side.
Potential Impact
An attacker with authenticated Duo Agent Platform access could exploit this SSRF vulnerability to redirect requests to attacker-controlled endpoints, resulting in disclosure of sensitive Google Cloud Vertex service credentials and private signing keys. This could compromise the confidentiality of cloud service credentials and signing keys, potentially impacting the security of the GitLab AI Gateway's cloud environment.
Mitigation Recommendations
GitLab manages remediation for this cloud-hosted AI Gateway service and has remediated the vulnerability in their environment. Users of the GitLab AI Gateway cloud service do not need to take additional action. Check the official GitLab advisory for the latest status and guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitLab
- Date Reserved
- 2026-08-18T12:06:50.452Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Is Cloud Service
- true
Threat ID: 6a906badacd9273b49839ad0
Added to database: 08/27/2026, 16:54:05 UTC
Last enriched: 09/08/2026, 12:38:10 UTC
Last updated: 10/11/2026, 06:48:18 UTC
Views: 55
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.