CriticalVulnerabilityLLM-specific
CVE-2026-117574: A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-117574
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
CVE-2026-117574 is a flaw in ai-gateway-payload-processing. An authenticated remote attacker can submit a request naming another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's API keys into the request, letting the attacker consume that tenant's LLM resources and quotas.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumGHSA-8prr-f582-jqq3: LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputSimilar attack · GitHub Advisory Database
- MediumFake ChatGPT, Claude apps spread malware via signed AI binariesSimilar attack · CSO Online
- MediumTrusting Unsloth’s trust setting could mean executing malicious codeSimilar attack · CSO Online
- MediumAttackers compromised 42 GitHub repositories by using files too large to be searchedSimilar attack · CSO Online
- LowBank of America kindly asks that you don’t share your banking password with your AI assistantSimilar attack · TechCrunch (Security)