/
cves:CVE-2026-35029 × limpar

Resultados

3 casos · pág. 1/1

infosecurity-magazine.com · high

Check Point discloses LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 enabling gateway takeover and RCE

Check Point researchers disclosed two high-risk vulnerabilities in LiteLLM, an open-source LLM gateway with almost 100,000 downloads a month. The gateway connects enterprise AI applications to providers such as OpenAI, Google and Anthropic. The flaws, CVE-2026-35029 and CVE-2026-59823, could let any user with an account on a vulnerable de…

blog.checkpoint.com · high

Check Point Research discloses two high-risk LiteLLM LLM gateway flaws, CVE-2026-35029 and CVE-2026-59823

Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open source LLM gateway that organizations use to connect applications to AI providers such as OpenAI, Google and Anthropic. The project is widely deployed, with about 97 million downloads per month and over 59,000 GitHub stars. CVE-2026-35029 let any user, inclu…

itsecurityguru.org · high

LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 let low-privileged users take over AI gateways and steal provider API keys

Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open-source AI gateway that sits between enterprise applications and providers such as OpenAI, Anthropic and Google. A user with minimal privileges could take full control of the gateway, read sensitive files, execute arbitrary code and harvest the provider API k…