AI Gateway

A new open-source tool called AI Agent Gateway has been released, designed to keep credentials out of AI agent configurations. Instead of embedding API keys and secrets directly in agent setup files, the gateway manages authentication separately, reducing the risk of credential leaks. It targets developers building AI agents, a growing area where insecure handling of secrets is a common concern.

Futuriom reports that LLM gateways, infrastructure tools that route, manage and monitor traffic between applications and large language models, are gaining traction as enterprises scale their AI deployments. These gateways help companies control costs, handle model switching and enforce security across multiple AI providers, making them an increasingly important layer in the enterprise AI stack.

GitLab has fixed a critical vulnerability, tracked as CVE-2026-90970, affecting its AI Gateway component. Security outlets are urging users to update their deployments promptly, as flaws in AI gateway infrastructure could expose sensitive data or allow unauthorized access. Administrators are advised to review the advisory and apply the patch as soon as possible.

Tuskira has released an open source AI agent runtime gateway designed to let teams observe, govern and switch between large language models and MCP tools without rewiring their agents. The announcement, distributed via Business Wire, targets enterprises building AI agents that need model flexibility, oversight and control. Details on adoption and community response are limited so far, as the launch is newly announced.

GitLab has disclosed CVE-2026-90970, a critical remote code execution vulnerability in its AI Gateway service. The flaw allows authenticated users with Duo Agent Platform access to escape the prompt sandbox and execute arbitrary commands. Self-hosted instances are affected, and security teams are being urged to patch promptly.

GitLab has released emergency security patches addressing two critical vulnerabilities: a remote code execution flaw in its AI Gateway, tracked as CVE-2026-90970, and a maximum-severity path traversal issue. Both flaws are reportedly being actively exploited, prompting the unusually urgent rollout. Security teams are being urged to apply the updates immediately, with the disclosures fueling renewed discussion about securing AI infrastructure.

C1.ai has launched the C1 LLM Gateway, a platform designed to help enterprises govern how requests are routed across different large language models. The product is aimed at giving companies centralized control over AI model usage, costs and policies. The announcement was carried by major newswires and financial outlets, drawing attention within enterprise technology circles.

GitLab has patched a critical vulnerability, CVE-2026-90970, rated CVSS 9.9, in its AI Gateway. The flaw allows an authenticated attacker to escape the prompt-template sandbox and execute arbitrary commands on self-hosted deployments. Security professionals are urging administrators to apply the update quickly and check whether their installations are affected.

GitLab has released fixes for CVE-2026-90970, a critical vulnerability (CVSS 9.9) in its AI Gateway. An authenticated user with access to the Duo Agent Platform can run commands on the gateway. Only self-hosted gateway deployments are affected. Patches are available in versions 19.2.4, 19.3.2 and 19.4.1, and administrators are urged to update immediately.

A security vulnerability tracked as CVE-2026-90970 has been disclosed in GitLab's AI Gateway, reportedly allowing remote code execution on affected systems. GitLab's AI Gateway sits in front of the company's AI-powered features, so a flaw there could expose organizations using the platform's AI tooling. Administrators are being urged to check their deployments and apply patches. Details on affected versions and exploitation are still limited.

Developers are debating OpenRouter's pricing model, noting the service charges a 5.5% fee when users add credits rather than a per-token markup on API calls. A breakdown compares the total cost of routing AI requests through OpenRouter versus paying providers directly or self-hosting an open-source proxy like LiteLLM, offering a decision rule for choosing between the three approaches.

Cloudflare has opened the beta of its Monetization Gateway, letting businesses bill AI agents for the resources they consume using the long-dormant HTTP 402 'Payment Required' status code. The move targets the growing wave of agentic web traffic, giving sites a way to monetize machine access rather than block it, and positions Cloudflare at the center of the emerging pay-per-crawl economy.