19:17
2026-07-13
dev.to
ai-infrastructure
CVE-2026-42271: How a Popular AI Gateway Became an RCE Vector — And What to Audit in Your Stack
BerriAI disclosed CVE-2026-42271, a critical command-injection flaw in LiteLLM, a widely deployed open-source AI gateway. The vulnerability, scoring CVSS 8.8, affects versions 1.74.2 to before 1.83.7 …