Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
Check Point warns LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 can give any user admin access and code execution.
7
Stories per day · 30 days
1 RSS
Relatedcve-2026-350292cve-2026-598232litellm2rce2ssrf2checkpoint1consus1cui1fedramp1itar1rbac1yc1zero-retention1
5 stories, newest first · one card per story
Stories tagged #llm-gateway
Launch HN: Consus (YC F24) – LLM gateway for companies handling sensitive data
YC startup Consus launched an LLM gateway for ITAR and FedRAMP High workloads.
2
When LLM Gateways Go Wrong: Findings from LiteLLM
Check Point found patched LiteLLM flaws enabling config takeover, file read, RCE, and key theft.
5
Litelm: LiteLLM Without the Bloat
New open-source project Litelm launched on GitHub as a leaner alternative to the LiteLLM multi-provider LLM gateway.
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
Wiz found LiteLLM auth bypass (CVE-2026-59822) and post-auth RCE (CVE-2026-59821) chainable to cloud compromise; the bypass is in CISA KEV with in-the-wild exploitation.
10