Výsledky hledání

výrobce: LiteLLM× v celém archivu zrušit filtry

4 karet z 4 položek CZ · EN/orig

26. 8. 2026 1

When AI infrastructure becomes the target: Securing gateways and control points

In this article AI workloads are becoming high-value control pointsCase study 1: LiteLLM gateway compromiseCase study 2: RAGFlow compromiseCase study 3: Kestra compromiseMitigation and protection guidanceMITRE ATT&CK techniques observedReferencesLearn more AI is creating a new layer of enterprise infrastructure. Gateways, retrieval platforms, orchestration services, and containerized runtimes now sit between users, applications, data, and models. These systems concentrate credentials, data…

KEV ✓ EPSS 0.84 CVE-2026-42271 CVE-2026-48710 CVE-2026-49869 LiteLLM RAGFlow Kestra US

tg: zneužíváno tg: rozbor tp: AI tp: identita

26. 8. 18:43 · Microsoft Security Blog · When AI infrastructure becomes the target: Securing gateways and control points

27. 4. 2026 1

Critical SQL Injection Vulnerability in LiteLLM Exploited in-the-Wild (Campaign)

The vulnerability exists in LiteLLM’s authentication flow, where the Authorization: Bearer header is directly concatenated into a SQL query without proper parameterization. This flaw allows attackers to inject arbitrary SQL statements prior to authentication, enabling direct a...

LiteLLM US

27. 4. 02:00 · Wiz Research · Critical SQL Injection Vulnerability in LiteLLM Exploited in-the-Wild (Campaign)

26. 3. 2026 1

Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

TeamPCP orchestrated one of the most sophisticated multi-ecosystem supply chain campaigns publicly documented to date that cascaded through developer tooling and compromised LiteLLM, exposing how AI proxy services that concentrate API keys and cloud credentials become high-value collateral when supply chain attacks compromise upstream dependencies.

LiteLLM JP

26. 3. 01:00 · Trend Micro · Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

24. 3. 2026 1

LiteLLM supply chain attack (Incident)

Malicious versions of the LiteLLM python package (1.82.7 and 1.82.8) were published on the morning of 24 March 2026. The compromised packages employed two different methods to deliver their payload. The packages were published at approximately 8:30 UTC and quarantined by PyPI ...

LiteLLM US

24. 3. 01:00 · Wiz Research · LiteLLM supply chain attack (Incident)