{"data":{"id":"a7ca1b81-6168-4151-8080-f9b95ae12996","title":"When LLM Gateways Go Wrong: Findings from LiteLLM","summary":"Check Point Research assessed LiteLLM (v1.77.7), an open-source LLM gateway, and found multiple high-impact vulnerabilities, tracked as CVE-2026-35029 and CVE-2026-59823. The most significant flaw is a missing authorization check on the /config/update endpoint, which lets any authenticated user, including low-privileged accounts, modify the configuration.","solution":"Resolved as of LiteLLM version 1.83.9.","labels":["security","industry"],"sourceUrl":"https://research.checkpoint.com/2026/when-llm-gateways-go-wrong-findings-from-litellm/","publishedAt":"2026-10-13T14:30:26.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-13T14:30:26.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}