LiteLLM Vulnerability Chain Enables Full Server Takeover by Low-Privilege Users
A chain of three vulnerabilities in LiteLLM, a widely deployed open-source AI gateway, allows low-privilege users to escalate to full admin and…
Tag: Obsidian Security
Obsidian Security Discovers Critical LiteLLM Vulnerabilities
Obsidian Security, a cybersecurity company, disclosed a chain of three critical vulnerabilities in LiteLLM that allow low-privilege users to take over AI…
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…