Critical LiteLLM Vulnerabilities Enable AI Gateway Takeover and Credential Theft

LiteLLM let low-privileged users become admins and walk off with API keys. It has been patched in newer versions.

Security researchers discovered critical vulnerabilities in LiteLLM, a widely used open-source AI gateway, allowing low-privileged users to gain administrative control, execute arbitrary code, and steal API provider credentials. These flaws exposed organizations to unauthorized access and potential disruption of AI services. The issues have since been patched in newer versions.

See the full article