Product
An authenticated remote attacker can exploit a flaw in ai-gateway-payload-processing by submitting a request specifying another tenant's model identifier, resulting in unauthorized LLM resource consumption.