Cyber

What changed

BerriAI has released version 1.84.0 of LiteLLM, which resolves an improper authentication vulnerability. This flaw allowed unauthenticated attackers to bypass key validation by exploiting the MCP Streamable HTTP endpoint.

The vulnerability enabled attackers to use a forged Authorization header to trigger a fallback mechanism that could grant access without a valid LiteLLM key.

Who is affected

Organizations utilizing BerriAI's LiteLLM prior to version 1.84.0 are at risk of unauthorized access to sensitive MCP tooling.

This vulnerability primarily impacts developers and businesses leveraging LiteLLM as a proxy server for LLM API calls.

• BerriAI LiteLLM users prior to version 1.84.0
• Companies integrating LiteLLM into their AI workflows
• Developers relying on LiteLLM for API access

What to do

It is crucial for affected users to upgrade to LiteLLM version 1.84.0 or later to mitigate the risk associated with this vulnerability.

Additionally, organizations should review their authentication mechanisms and consider implementing additional security measures to prevent unauthorized access.

• Upgrade LiteLLM to version 1.84.0 immediately
• Audit existing API access controls
• Implement enhanced logging and monitoring for API calls

What changed

Adobe has disclosed a critical vulnerability in ColdFusion that allows for path traversal, which could lead to arbitrary code execution without user interaction. This vulnerability affects ColdFusion versions 2025.9, 2023.20, and earlier.

The flaw arises from improper limitations on pathname restrictions, which could be exploited by attackers to manipulate file paths and execute unauthorized commands.

Who is affected

Organizations using Adobe ColdFusion are at risk, particularly those running the affected versions. This vulnerability could have severe implications for data integrity and system security.

The following groups are notably impacted:

• Users of Adobe ColdFusion 2025.9 and 2023.20
• Businesses relying on ColdFusion for web applications
• Developers maintaining ColdFusion applications
• IT security teams managing Adobe products

What to do

It is crucial for affected organizations to assess their ColdFusion installations and apply necessary updates or patches provided by Adobe. Immediate action is recommended to mitigate potential exploitation.

Regularly review security configurations and implement best practices to limit exposure to such vulnerabilities.

• Update ColdFusion to the latest version as soon as possible.
• Conduct a security audit of existing ColdFusion applications.
• Implement monitoring for unusual activity that may indicate exploitation attempts.
• Educate development teams on secure coding practices to prevent similar vulnerabilities.