PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-56326] RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution

mccaulay.co.uk | vulnerability | CVE-2024-56326 | #rce | #vulnerability-research | #exploitation | #exploit | #ssti | #litellm | #cve-2024-56326
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution 11 May 202611 May 2026 McCaulayVulnerability Research ## Introduction LiteLLM is an...
CVE
CVE-2024-56326
Published
Collected

Related coverage

vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
vulnerability · horizon3.ai
POC CVE-2021-21972
Write the file supplied in the –file argument to the location specified in the –path argument. The file will be written in the context of the vsphere-ui user.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
Back