Vulnerability (CVE)
Obsidian Security disclosed a three-vulnerability chain in LiteLLM, an open-source AI gateway that brokers calls to more than 100 model providers, letting a default low-privilege account reach full admin and run code on the server; the chain is rated CVSS...
A campaign codenamed FortiBleed has targeted Fortinet FortiGate firewall and SSL VPN gateway devices worldwide since at least February 2026, with SOCRadar identifying over 80,000 devices whose working usernames and passwords were tested by suspected...
Wiz Research scanned 3,074 internet-facing LiteLLM AI gateways in February and found 294 accepted sk-1234, the example admin key printed in LiteLLM's own setup guide, with 191 of those having no key set at all. Holding that key gives read access to every...