CVE-2026-42208: Your AI Proxy's Auth Check Was the Backdoor
LiteLLM's API key verification had a pre-auth SQLi (CVSS 9.3). Six critical vulns in one month. Your AI proxy is now a high-value target.
Blog
Tag: #cve
Agent Security ≠ LLM Security: OWASP MCP Top 10 and Microsoft's Agent Governance Toolkit
MCP security fundamentally differs from traditional application security. With 30 CVEs filed in 60 days, organizations need a new security model. Learn how to protect agent deployments using OWASP MCP Top 10 and Microsoft's Agent Governance Toolkit.
CVE-2026-40175: How Axios Turns Prototype Pollution Into Full Cloud Compromise
A deep dive into the critical Axios gadget chain that escalates prototype pollution to RCE and AWS IMDSv2 bypass. CVSS 9.9.