LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by exploiting a critical vulnerability tracked as CVE-2026-42208.

A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving LLMs, has come under active exploitation in the wild less than 13 hours

Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is

<!-- SC_OFF --><div class="md"><p>New paper from UC Santa Barbara </p> <p>They formalized four attack classes against LLM API routers (the intermediaries that dispatch

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed