Skip to content

Security Bulletin: LiteLLM RCE Chain


Critical Threat Alert: LiteLLM Proxy RCE Chain

Multiple vulnerabilities (SQLi, SSTI, and Command Injection) have been disclosed, allowing for full system compromise of LiteLLM instances.

Vulnerability Summary

Advisory IDTypeAccess LevelSeverity
GHSA-r75f-5x8p-qvmcSQL InjectionUnauthenticatedCritical (9.3)
GHSA-xqmj-j6mv-4862SSTIAuthenticatedHigh
GHSA-v4p8-mg3p-g94gCommand ExecutionAuthenticatedHigh

Remediation Guidance

Affected Versions: v1.81.16 – v1.83.6

Recommended Action: Immediately upgrade to v1.83.7-stable or later.

Network Hunting (runZero Query)

Identify exposed LiteLLM instances by searching for specific HTTP headers and HTML titles:

_asset.protocol:http AND protocol:http AND (html.title:=”LiteLLM%” OR last.html.title:=”LiteLLM%”)

Atera Positioned as a Visionary in Gartner® Magic Quadrant™

Atera in Gartner® Magic Quadrant™

We are proud to share that Atera has been named a Visionary in the Gartner® Magic Quadrant™ for Endpoint Management Tools! This recognition, reflects Atera’s commitment to redefining how IT teams manage endpoints through AI agents and a truly autonomous approach to IT. Being positioned as a Visionary reinforces Atera’s belief that endpoint management should be intelligent, pre-emptive, and built to scale without adding complexity or headcount.

Start Free Trial

Autonomous IT for the modern enterprise

What we know makes Atera

All-in-One

Atera combines remote monitoring and management, patch management, helpdesk and ticketing, and professional services automation, giving IT teams access to a full stack that scales with their needs.

Agentic AI

Atera’s AI agents, Copilot and Robin, enable technicians to run diagnostics, create scripts, summarize and resolve tickets, boosting productivity and autonomous endpoint management through workflows.

Per-Technician Pricing

Atera’s per-technician licensing model allows unlimited endpoint management, offering a predictable, cost-effective business model for growing enterprises and MSPs.

 

Endless IT possibilities

Boost your productivity with Atera’s intuitive, centralized all-in-one platform

START FREE TRIAL
MAKE AN ENQUIRY

Book a demo for sales enquiry and quotations or email to sales@version-2.com.sg

Google Workspace Domain Switch Migration Strategy

Executing a domain switch within Google Workspace is a structural operation. Unlike standard migrations, the domain identity must be released from one tenant and captured by another in real-time. This requires a zero-latency execution path.

The Architectural Pivot: Because a domain cannot exist in two Workspace instances at once, identities must be temporarily re-homed to allow the domain to be released and re-verified at the destination.

The 6-Phase Execution Roadmap

  • Bulk Ingestion: Migrate data from the source to a staging domain at the destination to minimize cutover volume.
  • Identity Stripping: Use GAM to rename all source users off the primary domain onto a temporary secondary domain.
  • The Domain Capture: Release the primary domain from the source and immediately verify it at the destination.
  • Final Alignment: Rename destination users from staging addresses to their permanent primary domain identities.
  • MX Cutover & Delta: Update mail routing and run a final delta sync to capture the last remaining messages.
  • Safety Buffer: Maintain the source tenant for 30 days as a read-only safety net before final decommissioning.
Warning: “Domain in Use” errors are usually caused by a single forgotten alias or group. Automated auditing of the source environment is critical.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About CloudM
CloudM is an award-winning SaaS company whose humble beginnings in Manchester have grown into a global business in just a few short years.

Our team of tech-driven innovators have designed a SaaS data management platform for you to get the most from your digital workspace. Whether it’s Microsoft 365, Google Workspace or other SaaS applications, CloudM drives your business through a simple, easy-to-use interface, helping you to work smarter, not harder.

By automating time-consuming tasks like IT admin, onboarding & offboarding, archiving and migrations, the CloudM platform takes care of the day-to-day, allowing you to focus on the big picture.

With over 35,000 customers including the likes of Spotify, Netflix and Uber, our all-in-one platform is putting office life on auto-pilot, saving you time, stress and money.