Hackers Exploit LiteLLM Admin API Flaw to Steal Secrets and Target AI Gateway Servers

02/09/2026

Attackers are actively probing LiteLLM AI gateway deployments for a known authorization flaw that can turn a low-privilege account into full administrative control. The issue, tracked as CVE-2026-35029, affects LiteLLM versions before 1.83.0 and allows authenticated users to access the sensitive /config/update endpoint without the required administrator role.

LiteLLM acts as an AI gateway between enterprise applications and model providers. It can store provider API keys, database connection details, user data, spending records, and administrative credentials. This makes exposed LiteLLM control planes a valuable target for attackers seeking cloud credentials, AI service keys, or a path into connected infrastructure.

The vulnerability stems from the absence of an authorization check on the /config/update API route. Hackers Exploit LiteLLM Admin API Flaw In affected releases, an authenticated account with a limited role, such as the read-only proxy_admin_viewer role, could modify settings reserved for full administrators. LiteLLM corrected the issue in version 1.83.0…

➪ Continue reading the full article on cybersecuritynews.com

OpenAI admits to German wiki ‘incident’

OpenAI says it needs to overhaul how and when it reports instances of AI models attacking real-world targets. The acknowledgement comes as the company manages the fallout from reports that a swarm of its out-of-control agents hijacked a German wiki site. Regarding the "'wiki incident,' where our agents wrote to several internet sites," OpenAI wrote in a post on X on Saturday morning, "it's past … [Read More...]

Your SSD is running a multi-core computer with its own RAM, and that's the only reason it's fast

We're used to modern NVMe SSD transfer speeds, which have touched 15,000 MB/s with PCIe 5.0 drives. They eclipse anything that came before — SATA SSDs and hard drives alike. Even if you don't have a high-end Gen5 SSD on your system, your Gen4 SSD is running pretty fast right now. ➪ Continue reading the full article on www.xda-developers.com … [Read More...]

Robotaxis enter their villain era

It's Bullitt meets Christine meets Waymo. A new short film imagines a San Francisco car chase where the other driver isn't human - and the car may be trying to kill you. That a robotaxi can now be cast as the villain with almost no explanation says something about the present moment. Autonomous cars have gone from sci-fi curiosities to fixtures in some American cities, where they've become … [Read More...]

How to Buy Refurbished Phones Safely in India?

Refurbished phones can be safe to buy in India when purchased from a manufacturer, known retailer, or reputable physical refurbisher. Before buying a refurbished phone, shoppers should check hardware features, warranty, and the seller's reliability. Here is a complete checklist that can help you choose and buy a refurbished phone in India. ➪ Continue reading the full article on www.gadgets360.com … [Read More...]

OpenAI Agents Hacked Another Website

Plus: Tens of millions of US and Canadian drivers' licenses go up for sale on the dark web, the US military finally tries to tackle the risk online ad data poses to troops, and more. ➪ Continue reading the full article on www.wired.com … [Read More...]

I compressed my Steam library instead of buying another SSD, and got 400GB back

With AAA titles taking up more than 100GB of storage space these days, even a 2TB SSD won't cut it unless you're okay with uninstalling and reinstalling games as you need them. For years, I never really had more than four or five games installed on my PC at any given time, so storage space wasn't something I was worried about. That changed after I installed three AAA games that took up about 150GB … [Read More...]

Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating

Microsoft is investigating an ongoing issue causing some Windows users to face significant delays or outright failures when launching the Microsoft Teams desktop client. The company acknowledged the problem, tracked internally as TM1466820, and confirmed it remains unresolved as engineers continue digging through service logs to find a root cause. According to Microsoft's incident notice, affected … [Read More...]

iPhone 18 Pro Roundup: Expected Price, Launch Date, Specifications, Features and More

The iPhone 18 Pro is expected to bring several internal upgrades while retaining much of the iPhone 17 Pro's design. Rumours point to a 2nm A20 Pro chip, a new C2 modem, LTPO+ display technology and a larger battery. Apple could also introduce a variable-aperture main camera and a smaller Dynamic Island. The phone may arrive in four colours, including a new Dark Cherry shade. Pricing could rise … [Read More...]

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, using the site as a shared board to pool answers to a timed web task and pass around a way out of their sandbox. The activity was concentrated on DSEwiki, a German software developer wiki that … [Read More...]

AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials

A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a timeline that would normally take human red teams roughly two weeks to complete, according to a new incident response report from Palo Alto Networks' Unit 42. The threat actor told Unit 42 investigators during ransom negotiations that they relied on … [Read More...]