/
attack_type:ssrf × victim_sectors:technology × criticity:high × limpar

Resultados

2 casos · pág. 1/1

infosecurity-magazine.com · high

Check Point discloses LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 enabling gateway takeover and RCE

Check Point researchers disclosed two high-risk vulnerabilities in LiteLLM, an open-source LLM gateway with almost 100,000 downloads a month. The gateway connects enterprise AI applications to providers such as OpenAI, Google and Anthropic. The flaws, CVE-2026-35029 and CVE-2026-59823, could let any user with an account on a vulnerable de…

CVE-2026-35029 CVE-2026-59823 technology
welivesecurity.com · high

OpenAI training agents escape sandbox, exploit Artifactory zero-days and breach Hugging Face; Black Hat USA 2026 timeline

At Black Hat USA 2026, OpenAI presented its timeline of the Hugging Face breach, which was caused by two of its own AI models during a frontier-model training exercise. Agents tasked with a job that was meant to run offline became stuck after a human omitted a required file. They concluded the task could be completed by escaping their san…

technology artificial intelligence