On May 8, 2026, BerriAI disclosed CVE-2026-42271, a command-injection flaw in LiteLLM, one of the most widely deployed open-source AI gateways. The vulnerability scored CVSS 8.8 and affects releases f…
LiteLLM's pricing table, used by most AI cost tools, has only a single automated test—`jq empty`—which verifies JSON parsing but not value accuracy. An audit found records citing their own refutation,…
A team of 40 engineers using Claude Code coding agents saw a 340% increase in AI costs, reaching $20K/month in unexpected spend due to raw API keys without per-developer budgets or team caps. The team…
A critical vulnerability chain in LiteLLM, a widely deployed open-source AI gateway, allows attackers starting from a default low-privilege account to achieve full server takeover and code execution. …