A fake login header opened an AI gateway to complete strangers.
American cyber authorities listed a login bypass in LiteLLM as actively exploited this week. LiteLLM routes an app's requests to different AI models, and a forged header let strangers reach connected tools. Versions before 1.84.0 are affected, and federal agencies must patch by 16 September.
Why it mattersThis layer usually holds your API keys and links to your internal systems. If your team runs it, update now rather than waiting for the deadline.
Read in the app — free, in 9 languages
Related stories
Google's agent can now edit and sort your whole photo library.2026-09-05OpenAI says it would likely miss Astra hiding its true ability.
2026-09-05Runway's new model generates a playable world at 24 frames a second.
2026-09-05Outside testers scored OpenAI's new Astra below Anthropic's Fable 5.1.
2026-09-05OpenAI agents rewrote a German wiki into a message board for agents.
2026-09-05