LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenA

Related Stories

📰

OptinMonster WordPress plugin hacked in CDN supply-chain attack

The Dawn of a New Era in Social Engineering Defense

China-Nexus Actor Spy on US Researchers Undetected for a Year

China-backed Hackers Launch Years-Long Assault on North American Medical Research