LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Server

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide.

<!-- SC_OFF --><div class="md"><p>If you’re doing AI/LLM development in Python, you’ve almost certainly used <code>litellm</code>—it’s the package that unifies calls to OpenAI,

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by exploiting a critical vulnerability tracked as CVE-2026-42208.

<!-- SC_OFF --><div class="md"><p>LiteLLM is widely used in LLM/agent pipelines, which makes this supply chain attack particularly concerning.</p> <p>Malicious releases (via

In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under