GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI…

#!/usr/bin/env bash
# check_cve_2026_90970.sh
# Checks whether the GitLab AI Gateway is vulnerable to CVE-2026-90970
# (SSTI sandbox escape in Duo Workflow Service)
# Outputs: VULNERABLE / PATCHED / UNKNOWN

set -euo pipefail

CVE="CVE-2026-90970"
COMPONENT="GitLab AI Gateway"

# Fixed versions
FIXED_192="19.2.4"
FIXED_193="19.3.2"
FIXED_194="19.4.1"
FIRST_VULN="18.1.6"

version_gte() {
  # Returns 0 if $1 >= $2 (semver comparison)
  printf '%s\n%s' "$2" "$1" | sort -t. -k1,1n -k2,2n -k3,3n -C 2>/dev/null
}

check_version() {
  local ver="$1"
  local major minor patch
  IFS='.' read -r major minor patch <<< "$ver"
  patch=${patch:-0}

  # Check if version is below the first vulnerable version
  if ! version_gte "$ver" "$FIRST_VULN"; then
    echo "PATCHED"
    echo "INFO: $COMPONENT version $ver is below the vulnerable range ($FIRST_VULN+)."
    return
  fi

  # Check 19.4.x branch
  if [[ "$major" -eq 19 && "$minor" -eq 4 ]]; then
    if version_gte "$ver" "$FIXED_194"; then
      echo "PATCHED"
      echo "INFO: $COMPONENT version $ver >= $FIXED_194 (fixed)."
    else
      echo "VULNERABLE"
      echo "DETAIL: $COMPONENT version $ver is vulnerable. Upgrade to >= $FIXED_194."
    fi
    return
  fi

  # Check 19.3.x branch
  if [[ "$major" -eq 19 && "$minor" -eq 3 ]]; then
    if version_gte "$ver" "$FIXED_193"; then
      echo "PATCHED"
      echo "INFO: $COMPONENT version $ver >= $FIXED_193 (fixed)."
    else
      echo "VULNERABLE"
      echo "DETAIL: $COMPONENT version $ver is vulnerable. Upgrade to >= $FIXED_193."
    fi
    return
  fi

  # Check 18.1.6 through 19.2.x branch
  if version_gte "$ver" "$FIRST_VULN"; then
    if [[ "$major" -eq 19 && "$minor" -le 2 ]]; then
      if version_gte "$ver" "$FIXED_192"; then
        echo "PATCHED"
        echo "INFO: $COMPONENT version $ver >= $FIXED_192 (fixed)."
      else
        echo "VULNERABLE"
        echo "DETAIL: $COMPONENT version $ver is vulnerable. Upgrade to >= $FIXED_192."
      fi
    elif [[ "$major" -lt 19 ]]; then
      echo "VULNERABLE"
      echo "DETAIL: $COMPONENT version $ver is in the vulnerable range. Upgrade to >= $FIXED_192."
    else
      # 19.5+ assumed patched
      echo "PATCHED"
      echo "INFO: $COMPONENT version $ver is beyond the affected range."
    fi
    return
  fi
}

echo "=== $CVE Vulnerability Check ==="
echo "Component: $COMPONENT"
echo "Checking for AI Gateway container..."
echo ""

GATEWAY_VERSION=""

# Method 1: Docker
if command -v docker &>/dev/null; then
  CONTAINER_ID=$(docker ps --filter "ancestor=gitlab/model-gateway" --format "{{.ID}}" 2>/dev/null | head -1)
  if [[ -z "$CONTAINER_ID" ]]; then
    CONTAINER_ID=$(docker ps --filter "name=ai-gateway" --format "{{.ID}}" 2>/dev/null | head -1)
  fi
  if [[ -n "$CONTAINER_ID" ]]; then
    IMAGE=$(docker inspect --format '{{.Config.Image}}' "$CONTAINER_ID" 2>/dev/null)
    # Extract version from image tag (e.g., self-hosted-v19.2.3-ee or 19.2.3)
    GATEWAY_VERSION=$(echo "$IMAGE" | grep -oP '\d+\.\d+\.\d+' | head -1)
    echo "Found Docker container: $CONTAINER_ID"
    echo "Image: $IMAGE"
  fi
fi

# Method 2: Kubernetes
if [[ -z "$GATEWAY_VERSION" ]] && command -v kubectl &>/dev/null; then
  POD=$(kubectl get pods --all-namespaces -l app=ai-gateway -o jsonpath='{.items[0].metadata.name}' 2>/dev/null || true)
  if [[ -z "$POD" ]]; then
    POD=$(kubectl get pods --all-namespaces -l app.kubernetes.io/name=ai-gateway -o jsonpath='{.items[0].metadata.name}' 2>/dev/null || true)
  fi
  if [[ -n "$POD" ]]; then
    NS=$(kubectl get pods --all-namespaces -l app=ai-gateway -o jsonpath='{.items[0].metadata.namespace}' 2>/dev/null || true)
    IMAGE=$(kubectl get pod "$POD" -n "${NS:-default}" -o jsonpath='{.spec.containers[0].image}' 2>/dev/null || true)
    GATEWAY_VERSION=$(echo "$IMAGE" | grep -oP '\d+\.\d+\.\d+' | head -1)
    echo "Found Kubernetes pod: $POD (namespace: ${NS:-default})"
    echo "Image: $IMAGE"
  fi
fi

echo ""

if [[ -z "$GATEWAY_VERSION" ]]; then
  echo "UNKNOWN"
  echo "Could not detect a running GitLab AI Gateway container."
  echo "If you know the version, re-run with: VERSION=19.2.3 $0"
  # Allow manual override
  if [[ -n "${VERSION:-}" ]]; then
    GATEWAY_VERSION="$VERSION"
    echo ""
    echo "Using manually specified version: $GATEWAY_VERSION"
    check_version "$GATEWAY_VERSION"
  fi
  exit 2
fi

echo "Detected version: $GATEWAY_VERSION"
echo ""
check_version "$GATEWAY_VERSION"