Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/08 12:4 a.m.26 views

LiteLLM: Password hash exposure and pass-the-hash authentication bypass

Impact Three issues combine into a full authentication bypass chain: 1. Weak hashing: User passwords are stored as unsalted SHA-256 hashes, making them vulnerable to rainbow table attacks and trivially identifying users with identical passwords. 2. Hash exposure: Multiple API endpoints /user/info...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder