Ai-Gateway — PoC Archivehttps://poc.intelseclab.com/tags/ai-gateway/Latest proof-of-concept entries.Hugoen-usSun, 12 Jul 2026 00:00:00 +0000Flowise Enterprise Authentication Bypass via Hardcoded Default JWT Secrets (CVE-2026-56271)https://poc.intelseclab.com/pocs/web/2026-07-12_cve-2026-56271-flowise-hardcoded-jwt-authbypass/Sun, 12 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-12_cve-2026-56271-flowise-hardcoded-jwt-authbypass/Critical severity (CVSS 9.8) — web · CVE-2026-56271 (GHSA-cc4f-hjpj-g9p8). Status: Weaponized (functional PoC forges valid admin JWTs and confirms bypass against real endpoints). Affects: Flowise — open-source low-code LLM/agent orchestration platform (enterprise edition, passport authentication middleware). Tags: flowise, ai-gateway, llm-orchestration, jwt, hardcoded-secret, authentication-bypass, cwe-321, unauthenticated, remote, privilege-escalation.webCriticalflowiseai-gatewayllm-orchestrationjwthardcoded-secretauthentication-bypasscwe-321unauthenticatedremoteprivilege-escalationLiteLLM Proxy Pre-Authentication SQL Injection via Error-Handling Callback (CVE-2026-42208)https://poc.intelseclab.com/pocs/web/2026-07-11_cve-2026-42208-litellm-sqli-proxy-authbypass/Sat, 11 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-11_cve-2026-42208-litellm-sqli-proxy-authbypass/Critical severity (CVSS 9.8) — web · CVE-2026-42208 (GHSA-r75f-5x8p-qvmc). Status: Weaponized (public working PoC + Docker lab, actively exploited in the wild within 36 hours of disclosure). Affects: LiteLLM Proxy — open-source LLM/AI gateway (22,000+ GitHub stars) fronting OpenAI, Anthropic, and other model provider APIs. Tags: litellm, ai-gateway, llm-proxy, sql-injection, cwe-89, unauthenticated, remote, blind-sqli, kev-adjacent, credential-theft.webCriticallitellmai-gatewayllm-proxysql-injectioncwe-89unauthenticatedremoteblind-sqlikev-adjacentcredential-theftLiteLLM Authentication Bypass via OIDC Userinfo Cache Key Collision (CVE-2026-35030)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35030-litellm-oidc-cache-collision-authbypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35030-litellm-oidc-cache-collision-authbypass/Critical severity (CVSS 9.1) — web · CVE-2026-35030. Status: Weaponized. Affects: LiteLLM proxy (with enable_jwt_auth: true). Tags: authentication-bypass, litellm, oidc, jwt, cache-collision, ai-gateway, cwe-287.webCriticalauthentication-bypasslitellmoidcjwtcache-collisionai-gatewaycwe-287LiteLLM /config/update Broken Access Control (CVE-2026-35029)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35029-litellm-config-broken-access-control/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35029-litellm-config-broken-access-control/High severity (CVSS 8.8) — web · CVE-2026-35029. Status: Weaponized. Affects: LiteLLM proxy. Tags: broken-access-control, litellm, ai-gateway, config-update, ssrf, rce, environment-variable-theft, cwe-863.webHighbroken-access-controllitellmai-gatewayconfig-updatessrfrceenvironment-variable-theftcwe-863Authenticated Command Injection in LiteLLM MCP Test Endpoints (CVE-2026-42271)https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-42271-litellm-mcp-command-injection/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-42271-litellm-mcp-command-injection/High severity (CVSS 8.7) — web · CVE-2026-42271. Status: PoC. Affects: BerriAI LiteLLM (proxy) — MCP preview/test endpoints. Tags: command-injection, LiteLLM, MCP, AI-application, ai-gateway, authenticated, api-key, subprocess.webHighcommand-injectionLiteLLMMCPAI-applicationai-gatewayauthenticatedapi-keysubprocess