Security Flaws Found in Top Open Source AI Gateway — LiteLLM Vulnerabilties Could Affect Millions of Users

LiteLLM Critical Vulnerabilities Allow Auth Bypass and Credential Theft (CVE Patched in 1.40.0)

Security researchers discovered four critical vulnerabilities in the popular open-source AI gateway LiteLLM, enabling authentication bypass, credential theft, privilege escalation, and server-side request forgery. These flaws could allow attackers to compromise AI infrastructure and run up costly unauthorized queries. Patches were released in version 1.40.0.

Security flaws found in top open source AI gateway — LiteLLM vulnerabilties could affect millions of users

A patch has been made available, so make sure to apply it before someone racks up a big AI bill.

Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

Check Point Research (CPR) has identified two serious security vulnerabilities in LiteLLM, an open-source AI gateway that connects applications to AI providers such as OpenAI, Google, and Anthropic. The software handles around 100 million downloads monthly and has more than 59,000 GitHub stars, according to CPR. Researchers tested LiteLLM version 1.77.7 and found flaws that

Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways

Check Point Research has discovered two high risk vulnerabilities in LiteLLM, the open source LLM gateway that organizations use to connect their… Read more →