Summary
The CVE describes unauthenticated plugin-path submission through POST /api/plugins when management authentication is disabled, allowing native code execution on affected dynamically linked builds. The published static Docker image is expected to be limited to SSRF, but operators should still upgrade or enable management authentication.
Why it matters
AI gateways that load native extensions combine model-serving exposure with conventional server compromise risk, making plugin administration and build configuration security-critical.
Related coverage
- LiteLLM 1.100.0 expands gateway integrations and security controls
- Microsoft APM 0.29.1 hardens agent package management
- Qwen Code preview adds inspectable multi-agent workflows