LLM Gateway LiteLLM Hit by Supply-Chain Poisoning; Full Checklist for Oct 2026 Disclosures
_philschmid · x · 2026-10-22
Philipp Schmid compiled a triage checklist for a wave of security disclosures dated Oct 21-22, 2026. The headline item is supply-chain poisoning in LiteLLM 1.107.0: malicious .pth files (cook.pth, litellminit.pth) planted in lockfiles, Docker images and local environments — check site-packages and /tmp for .pconce and remotecodeloader.lock artifacts.
Also covered: leaked Railway configs (rotate all RAILWAY secrets), PHP security releases, Node/Bun Brotli decoding flaws, self-hosted GitLab CVE-2026-110264 (patch in 19.5.1), and eMudhra CA store issues (uv <0.11.7, certifi <2026.10.20). Links to official advisories and fix guides are included.
More from Safety
- Greg Brockman: AI makes hacking 100x more profitable and easier, upending hacker economics — gabriel1 · 2026-10-23
- Account hacks surge: 6-step emergency checklist plus an AI audit prompt — petergyang · 2026-10-23
- For consumer AI founders, 'When are you launching in Europe?' is the new 'When Android?'—only 100x worse — omooretweets · 2026-10-23
- mmitchell_ai questions whether the AI safety vs security framing stems from EA — mmitchell_ai · 2026-10-23
- AI agent payments debate: experts say agents need verifiable mandates, not credential sharing — AlexTensor · 2026-10-23
- MPI-Sec PhD Thesis on Vulnerability Detection Benchmarks Includes Pre-LLM Classic "Top Score on the Wrong Exam" — mboehme_ · 2026-10-23