Lucene search
+L

499 matches found

Kitploit
Kitploit
added 2026/09/14 1:56 a.m.8 views

CVE-2026-42203

LiteLLM CVE-2026-42203 PoC Usage Instructions This document explains how to start a local LiteLLM environment and run CVE-2026-42203.py to verify the /prompts/test SSTI vulnerability. Only use in a local experimental environment that you are authorized to test. Do not point the script at...

8.8CVSS5.9AI score0.00373EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.134 views

LiteLLM - Server-Side Request Forgery

LiteLLM vulnerable to Server-Side Request Forgery SSRF vulnerability Exposes OpenAI API Keys. id: CVE-2024-6587 info: name: LiteLLM - Server-Side Request Forgery author: pdresearch,iamnoooob,rootxharsh,lambdasawa severity: high description: | LiteLLM vulnerable to Server-Side Request Forgery SSRF...

7.5CVSS7.6AI score0.35316EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.62 views

LiteLLM - Arbitrary File Read

LiteLLM 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts. id: CVE-2026-35029 info: name: LiteLLM - Arbitrary File Read...

8.8CVSS6AI score0.25068EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.37 views

LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

8.8CVSS6.9AI score0.15056EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/13 8:50 a.m.7 views

litellm-command-injection-security-assessment

CVE-2026-42271 - LiteLLM AI 网关 MCP 命令注入 RCE 顾问式网络安全报告 专业漏洞评估报告,针对 LiteLLM 命令注入风险,包括高管摘要、技术影响、修复及缓解策略。 📍 报告快照 字段| 详情 ---|--- 报告类型| 漏洞评估报告 参与背景| 安全研究 主要关注点| 应用安全 受众| 安全团队、工程团队、招聘经理 输出风格| 高管摘要、技术分析、业务影响、修复路线图 发布状态| 已脱敏,供公开作品集审阅 !IMPORTANT 本报告已特意脱敏,以在 GitHub 上公开发布。敏感标识符、凭证、基础设施值及客户特定证据均替换为明确的占位符。 🧭...

8.8CVSS6.3AI score0.83594EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.64 views

LiteLLM - SQL Injection

LiteLLM 1.81.16 to 1.83.7 contains a SQL injection caused by improper handling of caller-supplied key in database query during proxy API key checks, letting unauthenticated attackers read and modify database data, exploit requires crafted Authorization header. id: CVE-2026-42208 info: name: LiteL...

9.8CVSS6.2AI score0.8942EPSS
SaveExploits8References3
Kitploit
Kitploit
added 2026/09/10 5:35 a.m.4 views

poc_cve-2026-42208

CVE-2026-42208 — LiteLLM 预认证 SQL 注入 一个用于复现和检测 CVE-2026-42208 的实验室环境,这是 LiteLLM 中的一个严重预认证 SQL 注入漏洞,未经过滤的 Bearer 令牌会直达原始 PostgreSQL 查询。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-42208 GHSA| GHSA-r75f-5x8p-qvmc CVSS| 9.3(严重)— AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 受影响版本| = 1.81.16, ← payload does NOT start...

9.8CVSS6.3AI score0.8942EPSS
SaveExploits8References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.102 views

LiteLLM - Command Injection

A critical unauthenticated remote code execution vulnerability exists in LiteLLM due to improper input handling in the MCP stdio test endpoint. An attacker can send a specially crafted request to the /mcp-rest/test/connection endpoint with controlled parameters, resulting in arbitrary command...

8.8CVSS7.2AI score0.83594EPSS
SaveExploits4References4
Kitploit
Kitploit
added 2026/09/10 1:36 a.m.8 views

CVE-2026-42208-Lab

CVE-2026-42208 — PoC de inyección SQL por tiempo previa a la autenticación en LiteLLM Laboratorio Docker local y PoC de daño mínimo para CVE-2026-42208, una vulnerabilidad de inyección SQL previa a la autenticación en la ruta de verificación de claves API del proxy LiteLLM. Este repositorio...

9.8CVSS6.3AI score0.8942EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/10 12:57 a.m.6 views

threat-intel-brief-cve-2026-42208-litellm

Informe de Inteligencia de Amenazas - CVE-2026-42208: Inyección SQL en BerriAI LiteLLM CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc Puntuación CVSS: 9.3 Crítica Software afectado: BerriAI LiteLLM versiones = 1.81.16, 1.83.7 Versión corregida: 1.83.7-stable publicada el 19 de abril de 2026 Añadid...

9.8CVSS6.2AI score0.8942EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/09 8:31 a.m.8 views

CVE-2026-42208_lab

Inyección SQL en LiteLLM Proxy GHSA-r75f-5x8p-qvmc Un entorno de reproducción para la vulnerabilidad de inyección SQL en el flujo de autenticación de claves API de LiteLLM Proxy. Resumen de la vulnerabilidad...

9.8CVSS6.3AI score0.8942EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/09 5:29 a.m.4 views

CVE-2026-42208

✦ CVE-2026-42208 - LiteLLM 中的严重 SQL 注入漏洞 🧭 概述 CVE-2026-42208 是一个影响 LiteLLM AI 网关的严重的预认证 SQL 注入漏洞 。 它允许攻击者在无需认证 的情况下利用后端数据库查询,可能暴露敏感的 AI 基础设施数据。 📦 受影响软件 LiteLLM 受影响版本:1.81.16 → 1.83.6 🧨 漏洞类型 root@kitploit: SQL 注入(预认证) 无需登录 🚫 可通过 HTTP 请求操作进行利用 直接针对后端数据库层 📊 严重等级 🔴 严重 CVSS 评分:9.3 – 9.9...

9.8CVSS6.4AI score0.8942EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/08 6:00 p.m.5 views

CVE-2026-40217-PoC

CVE-2026-40217 — LiteLLM 防护沙箱逃逸 LiteLLM POST /guardrails/testcustomcode — 沙箱逃逸导致默认 Docker 部署中 root 权限下的远程代码执行 RCE 。 字段| 值 ---|--- CVE| CVE-2026-40217 CVSS| 8.8 高 — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-913(对动态管理代码资源控制不当)/ CWE-94 受影响版本| LiteLLM ≤ 2026-04-08 (低于 v1.83.11) 修复版本|...

8.8CVSS6.2AI score0.15056EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/08 1:44 p.m.8 views

CVE-LiteLLM

cve-id ⚡ 简单使用 请仅在安全且授权的环境中使用此项目,例如: 本地虚拟机 Docker 容器 隔离的实验室环境 经过授权的渗透测试环境 示例设置: root@kitploit: git clone cd 项目使用 Python,请按以下步骤操作 创建虚拟环境 python -m venv venv 激活虚拟环境 macOS / Linux source venv/bin/activate Windows Git Bash / WSL source venv/Scripts/activate 安装依赖 pip install -r requirements.txt 示例用法:...

8.8CVSS6.3AI score0.15056EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/08 12:13 p.m.8 views

CVE-2026-47101-PoC

CVE-2026-47101 — Escalada de privilegios en LiteLLM mediante /key/generate + /user/update El endpoint /key/generate de LiteLLM v1.82.6 versiones anteriores a v1.83.14 permite a un internaluser con privilegios bajos solicitar una API key con rutas comodín "/" y, posteriormente, a través del...

8.8CVSS8AI score0.00739EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/08 11:13 a.m.6 views

CVE-2025-45809-PoC

CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4(v1.81.0 之前版本)的 /key/block 和 /key/unblock 端点 中的 key 参数存在 SQL 注入漏洞 。攻击者可利用基于时间的盲注技术 窃取数据库内容、读取服务器文件。 Field| Value ---|--- CVE| CVE-2025-45809 GHSA| GHSA-cgmh-xxmq-hp46 CVSS v3.1| 5.4 MEDIUM —...

5.4CVSS5.9AI score0.00253EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/08 8:51 a.m.7 views

CVE-2025-11203-PoC

CVE-2025-11203 — LiteLLM Health Endpoint APIKEY Information Disclosure LiteLLM versions 1.63.14 /health endpoint, when processing the apikey parameter, does not properly filter sensitive information , causing authenticated users to retrieve API Keys stored in other model configurations. The apike...

3.5CVSS5.6AI score0.00416EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 8:45 a.m.9 views

CVE-2026-47102-PoC

CVE-2026-47102 — Escalada de Privilegios en LiteLLM mediante /user/update LiteLLM v1.83.7 antes de v1.83.10 el endpoint /user/update permite a usuarios con bajo privilegio que tengan acceso a este endpoint, modificar el campo userrole a proxyadmin al actualizar su propia cuenta, logrando una...

8.8CVSS8.1AI score0.00739EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 7:27 a.m.5 views

CVE-2026-35030-PoC

CVE-2026-35030 — Bypass de autenticación en LiteLLM mediante colisión de clave de caché de userinfo OIDC LiteLLM utiliza token:20 como clave de la caché de userinfo OIDC. Dos JWTs distintos firmados con el mismo algoritmo producen los primeros 20 caracteres idénticos , lo que permite a un atacant...

9.4CVSS5.9AI score0.0049EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 5:52 a.m.7 views

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update 越权访问漏洞 Broken Access Control LiteLLM 的 /config/update 端点未检查调用者的角色权限 。任何持有有效 API Key 的已认证用户(无需管理员权限)均可修改代理配置,注册恶意 Pass-Through 端点以实现 环境变量窃取、任意文件读取、远程代码执行 等攻击。...

8.8CVSS5.9AI score0.25068EPSS
SaveExploits2
Rows per page
Query Builder