erroneo.us
Search all guides⌘K

Digest · Wednesday

Security digest: September 2, 2026

1 editorial brief, 7 known exploited (cisa kev) additions and 6 critical advisories.

All digests · RSS · Markdown

Take stock

  • Patch this week: LiteLLM Proxy: Three Exploited Flaws in CISA KEV. Operators of self-hosted LiteLLM Proxy (AI gateway) deployments, especially any reachable from the internet or from broad internal networks, and anyone still using the default sk-1234 master key.
  • Do you run any of these? Sangoma Switchvox, SonicWall SMA1000 Appliances, JFrog Artifactory, BerriAI LiteLLM, Kestra Kestra OSS, Kludex Starlette. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-09-05.
  • Go: 3 critical advisories (github.com/openchoreo/openchoreo, github.com/centrifugal/centrifugo, github.com/seaweedfs/seaweedfs). Check with govulncheck ./....
  • npm: 2 critical advisories (orval). Check with npm audit (or: npm ls <package>).
  • PyPI: 1 critical advisory (omnigent). Check with pip-audit (or: pip show <package>).
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Patch this week

· Vulnerability · CVE-2026-59822, CVE-2026-42208

LiteLLM Proxy: Three Exploited Flaws in CISA KEV

If you run a self-hosted LiteLLM Proxy older than 1.84.0, upgrade now and treat the provider keys it holds as possibly exposed; SDK-only users are not affected.

Must act: Operators of self-hosted LiteLLM Proxy (AI gateway) deployments, especially any reachable from the internet or from broad internal networks, and anyone still using the default sk-1234 master key.

Can relax: Projects that only import the litellm Python SDK as a client library and do not run the proxy server, and proxies already on 1.84.0 or later with a strong master key.

  1. Upgrade the proxy to 1.84.0 or later (pin an exact version and verify hashes or image digest).
  2. If you cannot upgrade, block /mcp/ and /mcp-rest/test/* at the reverse proxy and set general_settings.disable_error_logs: true.
  3. Replace any default master key (sk-1234) and never run the proxy without a master key.

Read the brief →

Known exploited (CISA KEV) 7

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

CVEProduct and flawCISA due
CVE-2026-9586Sangoma Switchvox
Sangoma Switchvox SQL Injection Vulnerability		2026-09-05
CVE-2026-83549SonicWall SMA1000 Appliances
SonicWall SMA1000 Appliances OS Command Injection Vulnerability		2026-09-05
CVE-2026-83548SonicWall SMA1000 Appliances
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability		2026-09-05
CVE-2026-82329JFrog Artifactory
JFrog Artifactory Improper Authentication Vulnerability		2026-09-05
CVE-2026-59822BerriAI LiteLLM
BerriAI LiteLLM Improper Authentication Vulnerability		2026-09-16
CVE-2026-49869Kestra Kestra OSS
Kestra OSS OS Command Injection Vulnerability		2026-09-05
CVE-2026-48710Kludex Starlette
Kludex Starlette HTTP Request/Response Smuggling Vulnerability		2026-09-16

Critical advisories by ecosystem 6

GitHub-reviewed advisories rated critical, published this day (Pacific time).

Go 3

Check: govulncheck ./...

npm 2

Check: npm audit (or: npm ls <package>)

PyPI 1

Check: pip-audit (or: pip show <package>)