Bisheng, an open-source LLM DevOps platform, suffers from three critical vulnerabilities. A pre-authentication account takeover is possible through a legacy Single Sign-On (SSO) endpoint. This flaw allows attackers to create accounts with administrative privileges by bypassing proper authentication mechanisms. An Insecure Direct Object Reference (IDOR) vulnerability exposes cross-user workflow data, enabling any authenticated user to access sensitive configurations of others. Additionally, prior to version 2.5.0, authenticated users could abuse LLM credentials and disclose data due to missing access checks. These issues collectively allow unauthenticated attackers to gain administrative control. Authenticated users can exploit these flaws to access sensitive information and hardcoded credentials. The IDOR and credential abuse vulnerabilities have been patched in versions 3.0.0 and 2.5.0 respectively. However, the legacy SSO bypass vulnerability remains unpatched. Mitigation strategies for the SSO flaw include avoiding specific environment configurations and disabling or securing the legacy SSO endpoint. Restricting network access to this endpoint is also recommended.