Will GitLab AI Gateway RCE be added to CISA KEV by end of October 2026?

GitLab warned customers of a critical remote code execution vulnerability in its AI Gateway service that allows arbitrary command execution on vulnerable instances (per Bleeping Computer). The vulnerability poses immediate exploitation risk for AI infrastructure.

Resolution Criteria

CISA Known Exploited Vulnerabilities catalog listing the GitLab AI Gateway RCE with evidence of active exploitation or vendor confirmation of public PoC.