LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
The Hacker News·
Originalartikel lesen bei The Hacker NewsA default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one...
MITRE ATT&CK Kill Chain (4 Techniken)
Resource Development
Command & Control