{
 "id": "AIR-2026-1308",
 "slug": "cve-2026-19889-model-request-redirection-vulnerability-in-gi",
 "title": "CVE-2026-19889: Model request redirection vulnerability in GitLab AI Gateway",
 "summary": "GitLab remediated an AI Gateway vulnerability that allowed authenticated users to redirect model requests to external endpoints via crafted metadata. This flaw resulted in the exposure of cloud service credentials.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "data_leak"
 ],
 "severity": 2,
 "targets": [
  "Google",
  "Amazon",
  "framework_or_tooling"
 ],
 "products": [
  "GitLab AI Gateway",
  "Vertex AI",
  "Bedrock"
 ],
 "incident_date": "2026-08-27",
 "incident_date_precision": "day",
 "first_reported": "2026-08-27",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19889",
   "publisher": "NVD",
   "title": "CVE-2026-19889: GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.9.0 to…",
   "published_at": "2026-08-27"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-19889",
  "infra_vuln",
  "data_leak"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}