AI gateways

A new warning has been issued over high-risk security vulnerabilities affecting widely used large language model gateways, the infrastructure that routes and manages traffic to AI models. The alert suggests organizations relying on these tools could be exposed to attack. Details on affected products and fixes remain limited.

Security researchers have issued a warning about high-risk vulnerabilities in a widely used LLM gateway tool, the software layer organizations rely on to route and manage access to large language models. Infosecurity Magazine reported the advisory, which is drawing attention because flaws in such gateways could expose AI deployments across many companies at once.

Check Point Research published findings on security weaknesses in LiteLLM, a widely used open-source gateway for routing requests to large language models. The report details how flaws in the gateway could be exploited, highlighting the risks organisations take on when they centralise AI traffic through middleware. It underscores growing scrutiny of the infrastructure layer of enterprise AI deployments.

Consus, a startup from Y Combinator's Fall 2024 batch, has launched an LLM gateway aimed at companies that handle sensitive data. The tool lets businesses route AI model requests while keeping control over confidential information, addressing privacy and compliance concerns that often block enterprise AI adoption. Hacker News users are discussing the launch and its approach to data security.

Google has won two antitrust lawsuits, cementing its continued dominance of internet search as it expands into artificial intelligence. The court rulings are a significant legal victory for the company, which has faced years of regulatory pressure over its market power. Commentators note that despite scrutiny on both sides of the Atlantic, Google remains the central gateway to the web and a leading force in the AI race.

Eric, founder of Consus, a Y Combinator F24 startup, has launched a gateway that routes AI requests to infrastructure compliant with ITAR restrictions and controlled unclassified information (CUI) rules. The company says the platform itself meets ITAR requirements, letting companies in regulated industries use large language models without exposing sensitive data. The launch drew attention on Hacker News, where readers debated the compliance claims.

A new open-source tool called AI Agent Gateway has been released, designed to keep credentials out of AI agent configurations. Instead of embedding API keys and secrets directly in agent setup files, the gateway manages authentication separately, reducing the risk of credential leaks. It targets developers building AI agents, a growing area where insecure handling of secrets is a common concern.

Qualcomm has introduced new AI-powered Wi-Fi 8 broadband technology aimed at turning home routers into edge computing devices. Partners including internet provider gFiber and networking manufacturer Gemtek are working to transform routers into smart service gateways capable of running AI-driven services closer to users. The announcement highlights faster connectivity and on-device intelligence as the next step for broadband hardware.

A new guide aimed at chief information security officers warns that employees routinely paste customer data and API keys into public AI tools, and that written policy alone does not stop them. It lays out seven controls in rollout order, starting with discovery and data classification, followed by an enterprise AI tier and gateway monitoring.

A roundup of the top five AI gateways for multimodal workloads in 2026 is drawing attention among developers. Multimodal AI workloads that pass images, audio, and video create significant payload-size variances, making gateway selection important for performance and cost. The discussion spans devops, open source, and software engineering communities weighing which platforms best handle mixed media traffic.

Futuriom reports that LLM gateways, infrastructure tools that route, manage and monitor traffic between applications and large language models, are gaining traction as enterprises scale their AI deployments. These gateways help companies control costs, handle model switching and enforce security across multiple AI providers, making them an increasingly important layer in the enterprise AI stack.

GitLab has fixed a critical vulnerability, tracked as CVE-2026-90970, affecting its AI Gateway component. Security outlets are urging users to update their deployments promptly, as flaws in AI gateway infrastructure could expose sensitive data or allow unauthorized access. Administrators are advised to review the advisory and apply the patch as soon as possible.

GitLab has disclosed CVE-2026-90970, a critical remote code execution vulnerability in its AI Gateway service. The flaw allows authenticated users with Duo Agent Platform access to escape the prompt sandbox and execute arbitrary commands. Self-hosted instances are affected, and security teams are being urged to patch promptly.