CISA confirmed active exploitation of CVE-2026-42271 in LiteLLM, an open-source AI gateway, and set a June 22 federal remediation deadline. Obsidian Security disclosed a three-vulnerability chain allo…
A critical vulnerability chain in LiteLLM, a widely deployed open-source AI gateway, allows attackers starting from a default low-privilege account to achieve full server takeover and code execution. …
Coding agent sandboxes address host compromise but not credential authorization, leaving agents with high-scope tokens that can push to protected branches, deploy infrastructure, or read secrets. The …
A one-click remote code execution vulnerability with a 9.9 CVSS severity rating has been discovered in self-hosted deployments of the open-source Flowise AI platform. Researchers at Obsidian Security …