#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post
CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM
📰

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

DEV Community: cybersecurity·CVE Reports·1 day ago
#ZWefoAJn
#devtocybersecurity#devto#dev#litellm#return
Reading 0:00
15s threshold

CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

Vulnerability ID: CVE-2026-114612

CVSS Score: 9.9

Published: 2026-10-22

LiteLLM versions 1.87.0 through 1.104.0-rc.1 contain a cryptographic domain separation vulnerability (CWE-269, CWE-345, CWE-441) that allows an authenticated low-privilege user to escalate privileges to full proxy administrator. The application reuses a single symmetric cryptographic context and key derivation path for both at-rest secret encryption and ephemeral UI/CLI session authentication tokens without providing Associated Authenticated Data (AAD).…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Create free accountLog in