---
title: "Security digest: September 2, 2026"
url: https://erroneo.us/security/2026-09-02/
description: "September 2, 2026 vulnerability digest: 1 brief (LiteLLM Proxy: Three Exploited Flaws in CISA KEV); 7 CISA KEV additions (BerriAI, JFrog, Kestra, Kludex…)…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-09-02
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: September 2, 2026

1 editorial brief, 7 known exploited (cisa kev) additions and 6 critical advisories.

## Take stock

- Patch this week: LiteLLM Proxy: Three Exploited Flaws in CISA KEV . Operators of self-hosted LiteLLM Proxy (AI gateway) deployments, especially any reachable from the internet or from broad internal networks, and anyone still using the default sk-1234 master key.
- Do you run any of these? Sangoma Switchvox, SonicWall SMA1000 Appliances, JFrog Artifactory, BerriAI LiteLLM, Kestra Kestra OSS, Kludex Starlette. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-09-05.
- Go: 3 critical advisories ( github.com/openchoreo/openchoreo , github.com/centrifugal/centrifugo , github.com/seaweedfs/seaweedfs ). Check with govulncheck ./... .
- npm: 2 critical advisories ( orval ). Check with npm audit (or: npm ls <package>) .
- PyPI: 1 critical advisory ( omnigent ). Check with pip-audit (or: pip show <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Patch this week** [LiteLLM Proxy: Three Exploited Flaws in CISA KEV](https://erroneo.us/security/briefs/litellm-proxy-mcp-auth-bypass-kev/index.md): If you run a self-hosted LiteLLM Proxy older than 1.84.0, upgrade now and treat the provider keys it holds as possibly exposed; SDK-only users are not affected.

## Known exploited (CISA KEV)

- [CVE-2026-9586](https://erroneo.us/security/cve/CVE-2026-9586/index.md) Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability (CISA due 2026-09-05)
- [CVE-2026-83549](https://erroneo.us/security/cve/CVE-2026-83549/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances OS Command Injection Vulnerability (CISA due 2026-09-05)
- [CVE-2026-83548](https://erroneo.us/security/cve/CVE-2026-83548/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CISA due 2026-09-05)
- [CVE-2026-82329](https://erroneo.us/security/cve/CVE-2026-82329/index.md) JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability (CISA due 2026-09-05)
- [CVE-2026-59822](https://erroneo.us/security/cve/CVE-2026-59822/index.md) BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability (CISA due 2026-09-16)
- [CVE-2026-49869](https://erroneo.us/security/cve/CVE-2026-49869/index.md) Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability (CISA due 2026-09-05)
- [CVE-2026-48710](https://erroneo.us/security/cve/CVE-2026-48710/index.md) Kludex Starlette: Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CISA due 2026-09-16)

## Critical advisories

- [CVE-2026-73843](https://erroneo.us/security/cve/CVE-2026-73843/index.md) OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs — Go github.com/openchoreo/openchoreo < 1.0.2 → 1.0.2; Go github.com/openchoreo/openchoreo >= 1.1.0, < 1.1.2 → 1.1.2
- [CVE-2026-72716](https://erroneo.us/security/cve/CVE-2026-72716/index.md) Orval: Import-time RCE via query-parameter default -> zod module-level template literal — npm orval < 8.21.0 → 8.21.0
- [CVE-2026-62674](https://erroneo.us/security/cve/CVE-2026-62674/index.md) Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE — PyPI omnigent < 0.3.0 → 0.3.0
- [CVE-2026-71485](https://erroneo.us/security/cve/CVE-2026-71485/index.md) Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends — Go github.com/centrifugal/centrifugo <= 6.8.4 → 6.9.0
- [CVE-2026-71866](https://erroneo.us/security/cve/CVE-2026-71866/index.md) Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client — npm orval < 8.21.0 → 8.21.0
- [CVE-2026-72920](https://erroneo.us/security/cve/CVE-2026-72920/index.md) SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control — Go github.com/seaweedfs/seaweedfs < 0.0.0-20260512171108-5e8f99f40a8a → 0.0.0-20260512171108-5e8f99f40a8a

---
Source page: https://erroneo.us/security/2026-09-02/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt