Unverified50% confidenceFactExact time
Unless EXPERIMENTAL_UI_LOGIN is explicitly set to false, the LiteLLM proxy will attempt to decrypt any incoming token not starting with sk- as a UI session token; the GHSA-7hp6 advisory states that versions 1.87.0 to 1.90.x are likewise exploitable when it is set to true.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/13/2026
First Seen
Valid until: 1/11/2027
Sources
Related Entities
Related Claims
UnverifiedThe root cause of GHSA-7hp6-4w63-5g45 is that the LiteLLM proxy uses the same key both to encrypt stored secrets and to issue session tokens, causing the ciphertext returned by an encryption request to become a valid administrator token.62% similarUnverifiedThe commit hash for langchain-core 1.6.9 is fc7dc77, signed using GitHub's verified signature mechanism (GPG key ID: B5690EEEBB952194).57% similarUnverifiedGCM nonce重用可使攻击者利用GF(2^128)多项式方程恢复认证密钥H并伪造认证标签，这一攻击被称为GCM nonce misuse attack57% similarUnverifiedML-KEM-768的公钥约1184字节，混合加密会增大通信数据包，可能影响延迟敏感应用55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1017244API
curl https://kongchang.com/api/v1/knowledge/claims/1017244MCP
get_claim(id=1017244)