LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
Obsidian Security disclosed a three-vulnerability chain in LiteLLM, an open-source AI gateway that brokers calls to more than 100 model providers, letting a default low-privilege account reach full admin and run code on the server; the chain is rated CVSS...