AIThe Hacker Newsabout 4 hours ago
LiteLLM Vulnerability Chain Enables Server Takeover
1 min read
Three chained vulnerabilities in LiteLLM let a low-privilege user escalate to full admin and execute code on the server. Obsidian Security rated the chain CVSS 9.9. BerriAI fixed the CVEs in LiteLLM v1.83.14-stable, released May 2. Upgrading closes the authorization bypass, privilege escalation, and remote code execution flaws.
Level
Hype check
Tap to vote and see what everyone thinks.
