AIWHYS

Technology

OIDC

2 synchronized stories carry this tag.

ReliabilityShipped

AWS removes compromised eMudhra trust roots across SDKs and managed services

AWS published and then materially updated a bulletin for CVE-2026-111943 after eight eMudhra/emSign intermediate CA private keys proved recoverable. AWS removed affected roots from shared trust bundles, shipped boto3 and botocore 1.43.117 plus Amazon Linux and Corretto updates, refreshed Bottlerocket images and staged CloudFront and load-balancer trust changes.

Why it matters: Agents and AI services commonly call identity providers, origins, webhooks and model endpoints through AWS SDKs and managed networking. A recoverable CA key can turn an apparently valid TLS chain into a false trust signal, so system packages, SDK bundles,…

Read storyOriginal source · aws.amazon.com
ReliabilityShipped

LiteLLM fixes critical OIDC cache-collision authentication bypass

LiteLLM patched an authentication bypass where an unauthenticated token sharing a cached prefix could inherit another user's identity and permissions in JWT or OIDC deployments using user-info caching.

Why it matters: An AI gateway centralizes provider credentials, quotas, and access decisions, so an identity cache collision can expose models, data, budgets, and administrative actions across tenants.

Read storyOriginal source · github.com