Topic Thread
3 published observations tracking this thread.
A password database should not need to recover the original password. It should store a representation designed to make guessing expensive and verification possible.
The LiteLLM flaw is important because the vulnerable component is not the model: it is the gateway that decides whether an external request can establish an MCP session and reach connected tools.
Authentication proves identity; sessions and tokens are mechanisms for carrying that identity across later requests.
