https://cybercrime.club/tags/template-injection/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usSat, 03 Oct 2026 23:04:35 -0400https://cybercrime.club/posts/gitlab-ai-gateway-cve-2026-90970-prompt-template-sandbox-escape-rce/Sat, 03 Oct 2026 23:04:35 -0400https://cybercrime.club/posts/gitlab-ai-gateway-cve-2026-90970-prompt-template-sandbox-escape-rce/GitLab patches CVE-2026-90970, a CVSS 9.9 Jinja2 prompt-template sandbox escape in self-hosted AI Gateway that lets an authenticated Duo Agent Platform user run arbitrary commands on the host.vulnerabilities