Skip to content

CVE-2026-35029

Named by 3 kept items in this workspace.

2 items name it under cves and 1 under classification.key entities.

Search every workspace for CVE-2026-35029. It matches the name as written, so it can find other things that share it.

The items that name it 3

  • ♫Why♥Not♪ (@Python_s_) on X
    advisoryas cves2026-10-13It is written here as CVE-2026-35029 (HIGH, CVSS v4.0: 8.7; LiteLLM Proxy; originally disclosed April 2026; new Check Point Research technical research published October 13, 2026).

    HIGH, CVSS v4.0: 8.7; LiteLLM Proxy; originally disclosed April 2026; new Check Point Research technical research published October 13, 2026

  • Top GenAI security resources — October 2026
    articleas classification.key entities2026-10-13
  • Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
    writeupas cves2026-09-09

    Config update endpoint (controls pass-through routes) did not require PROXY_ADMIN role, allowing any authenticated user to configure arbitrary pass-through endpoints. Fixed in v1.83.0. Unrelated to the Wiz research.

All cves in this workspace.