Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft
LiteLLM vulnerabilities allow admin takeover and API key theft.
Run Check Point Research?
Get an email when a reviewed story names Check Point Research, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Check Point Research has discovered two critical vulnerabilities in LiteLLM, an open-source AI gateway. These flaws, CVE-2026-35029 and CVE-2026-59823, could allow low-privilege users to execute arbitrary code, access sensitive files, hijack administrator accounts, and steal API keys from AI providers. The issues are fixed in version 1.83.9 and later.
The lesson from this incident
Full lessonTwo critical vulnerabilities in LiteLLM, a widely used open-source AI gateway, allowed low-privilege users to escalate privileges, execute arbitrary code, and steal sensitive API keys from AI providers such as OpenAI and Anthropic. The root cause lies in insufficient input validation and improper access control within the application, enabling attackers to move laterally and compromise administrative accounts. This is particularly dangerous given that LiteLLM acts as a centralized gateway, meaning a single compromise can expose all connected AI provider credentials. Organizations slow to patch open-source dependencies in AI pipelines face compounding risk as these tools rapidly proliferate in production environments. Fixes are available in version 1.83.9 and later, making prompt patching essential.
What helps against this
How we list vendors
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.