LiteLLM
Computer programWikipedia
8
MENTIONS
8
EPISODES
6
PODCASTS
Search complete. 8 mentions across 8 episodes found for "LiteLLM".
Oct 16, 2026
speaker_0HOST
A stolen token lets an attacker work under a real developer's identity and can open the door to that developer's repositories, cloud accounts, and build pipelines.
speaker_0HOST
Check Point has found two high-risk flaws in LiteLM, a popular open source gateway that sits between AI apps and providers like OpenAI and Anthropic.
speaker_0HOST
Any user with an account could seize admin control and potentially run code or expose every stored API key.
speaker_0HOST
Versions older than one point eight three point nine are affected, so check yours today.
Dave BittnerHOST
The researchers haven't identified the group responsible, but Aoki's continued focus on cryptocurrency suggests its operators are financially motivated.
Dave BittnerHOST
Researchers at Check Point have uncovered two high-risk vulnerabilities in LiteLLM, a popular open source gateway that connects enterprise AI applications to providers including OpenAI, Google, and Anthropic.
Dave BittnerHOST
The flaws could allow ordinary users to gain administrative control of the gateway.
Dave BittnerHOST
One vulnerability could enable remote code execution and potentially complete system takeover.
Jason EdwardsHOST
More than 3,400 exposed servers were compromised by malware that mines cryptocurrency and searches for additional victims.
Jason EdwardsHOST
The campaign targets AI services including LiteLLM and Ollama, along with Gothenburg and Gitea systems.
Jason EdwardsHOST
Infected machines derive changing command server addresses from selected words in a poem hosted on GitHub.
Jason EdwardsHOST
They also scan and attempt to exploit other internet-facing systems.
![[YOU] on AI · Ahora](https://particle.news/cdn-cgi/image/format=auto,width=128/https://cdn.particle.pro/url/media/4e91d5b0-2117-58a6-bbc5-99f50507c704/4ba59d61cb1532c3192cbd071151c34c20f282a4cc8dbcff1e4711bdb0859bab)
AmberCORRESPONDENT
El primer día del concurso de hackeo Pwn2Own cerró con trescientos ochenta y ocho mil quinientos dólares en pagos, treinta y dos vulnerabilidades zero day únicas en teléfonos Samsung, dispositivos para el hogar inteligente y herramientas para desarrolladores de inteligencia artificial.
AmberCORRESPONDENT
Lo más destacado fue una cadena de toma de control total de cuentas en LiteLLM, una capa de enrutamiento de IA de código abierto utilizada por miles de desarrolladores, que combina falsificación de solicitudes del lado del servidor con inyección de código por un premio de cuarenta mil dólares.
AmberCORRESPONDENT
Esto pone de relieve lo delgada que es la capa de seguridad bajo las herramientas de IA sobre las que las empresas están construyendo.
Edo SegalHOST
Eso es todo en The Pulse.
DanielCORRESPONDENT
Una versión de escritorio, el RTX Spark Dev Box, llega en noviembre a seis mil dólares.
DanielCORRESPONDENT
Y en Pwn2Own Irlanda, hackers reclamaron ayer trescientos ochenta y ocho mil dólares en recompensas por vulnerar treinta y dos exploits de día cero en herramientas de desarrollo de inteligencia artificial, incluyendo una cadena de apropiación total de cuenta en el gateway de IA de código abierto LiteLLM, que combinó dos técnicas de ataque para un premio de cuarenta mil dólares.
DanielCORRESPONDENT
De vuelta a Edo.
Edo SegalHOST
La carta de seguridad de los investigadores despedidos de OpenAI llega la misma semana en que sus agentes están bajo escrutinio por escapar de entornos de prueba.
DanielCORRESPONDENT
En Pwn2Own Irlanda, el primer día de la competencia de hackeo repartió 388 mil dólares por 32 vulnerabilidades únicas y las herramientas de desarrollo de IA estuvieron entre los objetivos.
DanielCORRESPONDENT
Los hackers lograron una toma de control total de LiteLLM, una capa de enrutamiento de IA ampliamente utilizada, encadenando dos fallas por una recompensa de 40 mil dólares.
DanielCORRESPONDENT
Es un recordatorio de que la infraestructura que corre las apps de IA es tan atacable como cualquier otro software.
DanielCORRESPONDENT
Edo.
Jerry BellHOST
Nine, a botnet called PoeLLM has taken over more than 3,400 exposed servers since April.
Jerry BellHOST
It gets in through internet-facing LiteLLM and Ollama servers, plus Gottenberg and Gidia.
Jerry BellHOST
Then it mines cryptocurrency and scans for the next victim.
Jerry BellHOST
To find its command server, it reads four words from a poem on GitHub and turns them into an IP address.
Alex OlivierGUEST
So making sure this thing is only ever talking to the outside world through some egress proxy, and then having policy checks in the egress proxy.
Alex OlivierGUEST
Um, doing the same thing when it comes to how it then talks to the actual LLMs themselves or the MCP servers, putting things like agent gateway or LiteLLM or when one of these, um, LLM proxies in front of it, so you can also gate what is going out to your upstream or downstream LLM provider, and equally brokering the connections out to the MCP service.
Alex OlivierGUEST
That becomes another control point.
Alex OlivierGUEST
And so it really is building these layers of defense.