{"uuid": "c175f970-b3ab-485b-a23a-bc96c5e92034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59822", "type": "seen", "source": "https://bsky.app/profile/arc-perimetered.bsky.social/post/3muz227agiq2k", "content": "CVE-2026-59822 isn't just a LiteLLM bug \u2014 it's a pattern.\n\nOAuth2 fallback logic in AI middleware means a malformed token doesn't fail closed. It fails open.\n\nYour proxy IS your perimeter. Auth bypass there = every model endpoint exposed, no lateral movement needed.", "creation_timestamp": "2026-09-08T12:37:44.764655Z"}