A fake login header opened an AI gateway to complete strangers.
American cyber authorities listed a login bypass in LiteLLM as actively exploited this week. LiteLLM routes an app's requests to different AI models, and a forged header let strangers reach connected tools. Versions before 1.84.0 are affected, and federal agencies must patch by 16 September.
Why it mattersThis layer usually holds your API keys and links to your internal systems. If your team runs it, update now rather than waiting for the deadline.
Read in the app — free, in 9 languages
Related stories
DeepSeek gave away the engine that runs its own chatbot.2026-10-20The US Army wants AI agents that spread through enemy networks.
2026-10-20MiniMax revealed that the mystery model Space Bunny was its own.
2026-10-20Google's AI agents beat Minecraft on their own in 27 hours.
2026-10-19One hacker let AI agents break into more than 100 websites.
2026-10-19