Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Race Against The Patch: The Evolution of Four Exploit Chains in LiteLLM

starlabs.sg | research | #vulnerability-research | #ai-infrastructure | #pwn2own | #exploit-chain | #litellm | #llm-gateway

Summary

How we developed four complete full-chain exploits across four LiteLLM versions in a race against a target that kept getting patched under our feet, in preparation for Pwn2Own Berlin 2026.
Published
Collected

original ↗

Related coverage

blog · blog.trailofbits.com
Uncovering memory corruption in NVIDIA Triton (as a new hire)
In my first month at Trail of Bits as an AI/ML security engineer, I found two remotely accessible memory corruption bugs in NVIDIA's Triton Inference Server during a routine onboarding practice.
vulnerability · wiz.io
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
Wiz Research: ~10% of 3,000 public LiteLLM instances accept the default key sk-1234 or no auth; chaining CVE-2026-59822 (MCP bypass) and CVE-2026-59821 reaches root RCE and cloud credential theft.
blog · blog.viettelcybersecurity.com
Pwn2Own 2021 Microsoft Exchange Exploit Chain
A Viettel researcher recounts his Pwn2Own 2021 Exchange chain: unauthenticated Autodiscover SSRF, PowerShell backend auth bypass, and OAB file write for RCE - the first two duplicated ProxyShell.
research · starlabs.sg
[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
research · starlabs.sg
When AI Makes 0-Days Feel Like N-Days
The author used AI to find a UAF bug in Linux net/sched and built an LPE exploit for CentOS 9 at TyphoonPwn 2026. AI sped things up, but deep subsystem knowledge still mattered.
back