LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /m…

▾ Abyssallitellm · litellmEPSS 91%via NVD

CVE-2026-42208Critical· 9.8CISA KEV0dayPoC

6mo ago

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query tex…

▾ Hadallitellm · litellmEPSS 89%via NVD

CVE-2026-45137High· 8.2

6mo ago

`Program<System>` accepts arbitrary executable programs

▾ Twilightanchor-lang · anchor-langEPSS 0.28%via OSV

CVE-2026-44471High· 7.8

6mo ago

gix-fs: Symlink prefix-reuse allows worktree escape during checkout

▾ Twilightgix-fs · gix-fsEPSS 0.29%via OSV

CVE-2026-25705High· 8.4

6mo ago

Rancher Extensions have arbitrary file access via path traversal

▾ Twilightrancher · github.com/rancher/rancherEPSS 0.37%via OSV

CVE-2026-44484Critical· 9.8

6mo ago

Compromise of PyTorch Lightning PyPi Package Versions

▾ Midnightpytorch-lightning · pytorch-lightningEPSS 0.39%via OSV

CVE-2026-79660Medium· 5.3

6mo ago

Ech0 comment model's Email field returned on public /api/comments endpoints

▾ Sunlitlin-snow · github.com/lin-snow/Ech0EPSS 0.41%via OSV

CVE-2026-79668Medium· 5.3

6mo ago

Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflation

▾ Sunlitlin-snow · github.com/lin-snow/ech0EPSS 0.43%via OSV

CVE-2026-79661Medium· 6.5

6mo ago

Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count

▾ Sunlitlin-snow · github.com/lin-snow/Ech0EPSS 0.43%via OSV

CVE-2026-79662High· 8.0

6mo ago

Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft

▾ Twilightlin-snow · github.com/lin-snow/Ech0EPSS 0.32%via OSV

CVE-2026-79663Medium· 4.8

6mo ago

Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers

▾ Sunlitlin-snow · github.com/lin-snow/Ech0EPSS 0.25%via OSV

CVE-2026-42501Medium· 5.3

6mo ago

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)

A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` com…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.23%via CSAF

CVE-2026-39823Medium· 5.4

6mo ago

html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)

A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper esc…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.31%via CSAF

Tagged “osv”

Open WebUI's responses passthrough endpoint lacks access control authorization

Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

open-webui Vulnerable to Stored XSS via Model Description

eml_parser has recursion DoS via nested message/rfc822 attachments

Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order

Bunsink has an SSRF bypass in `validate_webhook_url`

Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels

Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal

Mistune Math Plugin has an XSS Escape Bypass

Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants

Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection

Open WebUI has Improper Authorization Control

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format

`Program<System>` accepts arbitrary executable programs

gix-fs: Symlink prefix-reuse allows worktree escape during checkout

Rancher Extensions have arbitrary file access via path traversal

Compromise of PyTorch Lightning PyPi Package Versions

Ech0 comment model's Email field returned on public /api/comments endpoints

Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflation

Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count

Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft

Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)

html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)