1 article on this topic.
A prompt-template sandbox escape in the GitLab AI Gateway lets an authenticated Duo Agent Platform user run commands on the gateway host. Only self-hosted gateways need action, and no workaround is listed.