Over 39,000 LiteLLM AI Gateway Deployments Exposed on Public Internet

·20 views

A ZoomEye scan has identified 39,155 internet-facing assets matching LiteLLM fingerprints, with the largest concentrations in the United States, China, Japan, India, and Australia. LiteLLM is an AI gateway proxy that stores API keys for multiple model providers like OpenAI and Anthropic, making it a high-value target if compromised. A vulnerability in certain LiteLLM releases allowed any valid low-privilege key to execute arbitrary commands with proxy-level privileges, bypassing role checks entirely. Security researchers note that AI gateway infrastructure has rapidly moved from experimental to production use without adequate exposure management practices catching up. Organizations running LiteLLM are advised to upgrade to at least version 1.83.7 and audit whether their deployments are publicly reachable.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Claude Fable 5.2 Reportedly Scores 65 on Artificial Analysis Benchmark

A Hacker News post links to an Artificial Analysis page reporting that a model called Claude Fable 5.2 scored 65, which the headline describes as the highest result so far on that evaluation. The post itself carries little detail, consisting only of a link to the benchmark page and a discussion thread with four points and no comments at the time of publication. The score is presented as recorded on the Artificial Analysis platform, which compiles performance comparisons across AI models. Details on the benchmark's methodology and the specific tasks behind the score are not included in the submission. The claim has not been independently verified in this summary.

0 comments Read more at Hacker News

ProgrammingHacker News ·

USPS Releases Official ZIP Code Boundary Polygon Data

The United States Postal Service has made official ZIP Code boundary polygons available through its PostalPro resource site. The boundary data gives developers and analysts a standardized geographic representation of ZIP Code areas. The announcement was shared on Hacker News, where it drew 27 points and 9 comments. The source material provided is limited to the link and discussion metadata, so details about the data format, licensing, and update schedule are not available here.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Skip link on 22 app routes moves focus to the panel but leaves the URL unchanged

A keyboard-focus test of 22 app pages on the OnePassApps site checked the Skip to content link, which targets a main element with id main on every route. Pressing it with Enter moved focus to that main element on all routes, but the URL fragment stayed empty and the page did not scroll. The link is never the first Tab stop, since at least three shell controls come before it, and after it the shell's own controls still precede the app's first field. The first app control arrives as the 10th or 11th stop on most routes, and the author declined to give counts for two routes where the fields' accessible names came from wrapping labels.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Study finds 34% of post-rule state court decisions on AI fabrications cite the new citation-check rules

Four US states adopted binding court rules in 2026 requiring citation checks, with AI named as the motivation: New York, Florida, Connecticut and Indiana. An independent analysis of 84 readable state-court decisions from a public AI hallucination database, 32 of them issued after the relevant rule took effect, found that 11 (34%) cite the new rule. New York courts cited none of their 15 post-rule decisions to its new rule, instead relying mostly on an older frivolous-conduct rule. Florida's appellate courts cited their amended rule most often, and the author checked all matched passages by hand. The author cautions that the database is not a complete census and that courts may apply a rule without citing it by number.

0 comments Read more at DEV Community