GitLab has released an urgent patch for a critical vulnerability in its AI Gateway service that could allow arbitrary command execution. Tracked as CVE-2026-63688 (CVSS 9.9), the flaw affects self-hosted GitLab instances that utilize their own AI Gateway. A logged-in user with Duo Agent Platform access could exploit this to run commands on the gateway. Organizations hosting their own GitLab AI Gateway are strongly advised to update to versions 19.2.4, 19.3.2, or 19.4.1 immediately.