CVE-2026-1868 | GitLab AI Gateway up to 18.6.1/18.7.0/18.8.0 Duo Workflow Service special elements used in a template engine

A vulnerability has been found in GitLab AI Gateway up to 18.6.1/18.7.0/18.8.0 and classified as critical. This vulnerability affects unknown code of the component Duo Workflow Service. The manipulation leads to improper neutralization of special elements used in a template engine.

This vulnerability is listed as CVE-2026-1868. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.