Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/08 12:04 a.m.7 views

GHSA-69X8-HRGQ-FJJ8 LiteLLM: Password hash exposure and pass-the-hash authentication bypass

Impact Three issues combine into a full authentication bypass chain: 1. Weak hashing: User passwords are stored as unsalted SHA-256 hashes, making them vulnerable to rainbow table attacks and trivially identifying users with identical passwords. 2. Hash exposure: Multiple API endpoints /user/info...

8.6CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder