CVE-2026-75871 Server-Side Request Forgery (SSRF) in GitLab AI Gateway

High 8.2 Published 27 Aug 2026 Updated 27 Aug 2026

Authenticated users can redirect AI model requests to external endpoints, leaking cloud credentials and signing keys via SSRF in GitLab AI Gateway.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-75871?

CVE-2026-75871 is a high-severity server-side request forgery vulnerability in Gitlab Gitlab, published on 27 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an externally-controlled endpoint via a crafted inline flow configuration that overrides the HTTP Host header, resulting in disclosure of Google Cloud Vertex cloud service credentials and private signing keys.

Weakness: CWE-918

Which versions are affected by CVE-2026-75871?

It affects 1 product.

Products include Gitlab Gitlab.

How do I fix CVE-2026-75871?

No fix has been published for CVE-2026-75871 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2026-75871 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-75871 exists.

All Gitlab Gitlab vulnerabilities

Sources

Also known as GHSA-827c-52wf-3g9x.