LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
LiteLLM vulnerability chain allows low-privilege users to gain admin access and execute code.
A critical vulnerability chain affecting the open-source LiteLLM AI gateway allows low-privilege users to escalate to full administrator access and execute arbitrary code on the server. This chain, rated CVSS 9.9, exposes sensitive provider keys, decryption secrets, and all prompts and responses passing through the gateway. The maintainer has released a fix in version v1.83.14-stable.
AI summary of the linked source. Not reviewed by an editor. How this works
Run BerriAI?
Get an email when a new story names BerriAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-47101
- cve — CVE-2026-47102
- cve — CVE-2026-40217