Vendor
LiteLLM
- First Reported
- Jun 1, 2026
- Latest Reported
- Oct 9, 2026
Reported Context (3)
- ones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smart lighting hub. Pixel 10 Exploits Earn Researchers More Than $560,000 at Pwn2Own Ireland
- Nearly 1 in 10 publicly accessible LiteLLM instances accept a default master key or require no authentication at all. We found this while scanning roughly 3,000 internet-facing deployments of the most popular Researchers Detail LiteLLM Authentication Bypass, Root-Level RCE and Cloud Credential Theft
- Products including OpenAI Codex, LiteLLM, LM Studio, and NVIDIA Megatron Bridge all fell, each exploited at the boundary where the AI product unconditionally trusts an external tool or protocol (the "trust boundary" Pwn2Own Berlin 2026 Uncovers 47 Zero-Days Across AI and Enterprise Products
CVE (3)
People (8)
MITRE ATT&CK (4)
Vendors (19)
Products (46)
Tools (3)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.