When LLM Gateways Go Wrong: Findings from LiteLLM - Check Point Research
This story deserves to be shared
Send it to someone who'd care, or post it on your networks.
Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9.
The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the proxy’s runtime configuration. This single flaw enabled arbitrary file read, administrative account takeover, and remote code execution via malicious Python modules loaded from cloud storage. A separate SSRF vulnerability in the “Clientside LLM Credentials” feature allowed attackers to redirect API calls and exfiltrate provider keys. These findings highlight that as AI infrastructure tools rapidly evolve, foundational security practices like proper access control and input validation remain essential.
This article is an excerpt. To read the full content, visit the original source. Check Point Research
Related articles
A RAG-enhanced multi-agent LLM/VLM framework for auditable and region-aware structural health monitoring of a historic masonry structure - Nature
IntroductionHistoric masonry minarets are slender, tall structures that embody cultural identity while remaining vulnerable to progressive deterioration and sudden hazards1,2. Aging mortar, material heterogeneity, environmental exposure, nearby construction, and seismic activity can introduce cracks, detachments, and out-of-plane deformations that are difficult to detect early, especially when access is limited and interventions must be minimally invasive. Structural health monitoring (SHM) for such heritage assets therefore benefits from non-contact sensing and data-driven inference that can operate continuously, localize damage, and provide interpretable evidence to support conservation decisions. For tall, slender masonry forms, monitoring is additionally complicated by geometric discontinuities (e.g., balconies, openings, and transitions), spatially varying material properties, and complex soil–structure interaction, all of which can concentrate damage and alter dynamic response over time3,4,5.
The Moon’s Origin Could Have Taken Just Five Hours—Scientists Stunned by New Findings - Futura, le média qui explore le monde
Illustration of the collision between Theia and the early Earth. © Pavel, Adobe Stock The Futura Team represents the pulse of Futura’s editorial department, bringing together a collective expertise dedicated to the dissemination of scientific knowledge. Rather than the work of a single author, every article published under this signature is the result of a rigorous collaborative process involving journalists, editors, and fact-checkers. Specializing in news analysis via desk research and international wire services, the team focuses on transforming raw information into accessible, verified content. This curation and synthesis process ensures constant monitoring of technological innovations and major scientific breakthroughs. By cross-referencing sources and conducting multiple rounds of peer review, the Futura Team guarantees scientific accuracy and pedagogical clarity. This collective signature serves as a hallmark of trust, providing reactive, cross-disciplinary information at the forefront of current events
What 'threat' worries Canadians most and other key findings of State of the Nation poll - National Post
Skip to Content Subscribe My Account Manage My Subscriptions FAQ Newsletters Canada Canadian True Crime Canadian Politics Health World Israel & Middle East Financial Post NP Comment Longreads Puzzmo Diversions Comics NP News Quiz New York Times Crossword Horoscopes Modern Life Eating & Drinking Style Sponsored Play for Ontario Travel Travel Canada Travel USA Travel International Cruises Travel Essentials Culture Books Celebrity Movies Music Theatre Television Business Essentials Advice Lives Told Tails Told Shopping Buy Canadian Home Living Outdoor Living Kitchen & Dining Tech Style & Beauty Personal Care Entertainment & Hobbies Gift Guide Travel Guide Deals Savings National Post Store More Sports Hockey Baseball Basketball Football Soccer Golf Tennis Driving Vehicle Research Reviews News Gear Guide Obituaries Place an Obituary Place an In Memoriam Classifieds Place an Ad Celebrations Working Business Ads Archives Healthing Epaper Manage Print Subscription Profile Settings My Subscriptions My Offers Newsletters Customer Service FAQ Newsletters Canada World Financial Post NP Comment Longreads Puzzmo Diversions Modern Life Shopping Epaper Manage Print Subscription HomeNewsCanadaWhat
0 comments
No comments yet. Be the first to share your thoughts!