[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQh7FPQ76BymQg-sCEgHDH185PWDKv6eeh3W_3RZ6aow":3},{"article":4,"iocs":38,"watch_terms":39,"solutions":40,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"ff060bbc-6069-40e3-aa82-7f4bb97e498d","Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft","check-point-reports-litellm-flaws-enabling-admin-takeover-and-api-key-theft-774305","Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.","Check Point Research has discovered two critical vulnerabilities in LiteLLM, an open-source AI gateway. These flaws, CVE-2026-35029 and CVE-2026-59823, could allow low-privilege users to execute arbitrary code, access sensitive files, hijack administrator accounts, and steal API keys from AI providers. The issues are fixed in version 1.83.9 and later.","LiteLLM vulnerabilities allow admin takeover and API key theft.","https:\u002F\u002Fhackread.com\u002Fcheck-point-litellm-flaws-admin-takeover-api-key-theft\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fcheck-point-litellm-flaws-admin-takeover-api-key-theft.jpg","2026-10-14T10:05:23+00:00","2026-10-14T12:00:15.819648+00:00",9,[17,20,23,26,28,30],{"name":18,"type":19},"LiteLLM","product",{"name":21,"type":22},"Check Point Research","vendor",{"name":24,"type":25},"AI gateway","technology",{"name":27,"type":19},"OpenAI",{"name":29,"type":19},"Google",{"name":31,"type":19},"Anthropic","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[],[],[21,18,27],{"controls":41,"vendors":128},[42,71,100],{"slug":43,"name":44,"problem":45,"products":46},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[47,55,63],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"slug":72,"name":73,"problem":74,"products":75},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":101,"name":102,"problem":103,"products":104},"patch-management","Automated patch management","Known holes get closed in days, not months.",[105,113,120],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":101,"product_name":117,"url":118,"description":119},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",[129],{"slug":130,"name":131,"logo_path":132,"roles":133},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png",[134],"reported_by",{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":150},"critical-litellm-flaws-allow-admin-takeover-and-api-key-theft","Critical LiteLLM Flaws Allow Admin Takeover and API Key Theft","Two critical vulnerabilities in LiteLLM, a widely used open-source AI gateway, allowed low-privilege users to escalate privileges, execute arbitrary code, and steal sensitive API keys from AI providers such as OpenAI and Anthropic. The root cause lies in insufficient input validation and improper access control within the application, enabling attackers to move laterally and compromise administrative accounts. This is particularly dangerous given that LiteLLM acts as a centralized gateway, meaning a single compromise can expose all connected AI provider credentials. Organizations slow to patch open-source dependencies in AI pipelines face compounding risk as these tools rapidly proliferate in production environments. Fixes are available in version 1.83.9 and later, making prompt patching essential.",[140,141,142,143,144,145,146,147,148,149],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 6: Access Control Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AU-12: Audit Record Generation","NIST CSF ID.AM-2: Software platforms and applications inventoried","OWASP Top 10 A01:2021 – Broken Access Control","OWASP Top 10 A06:2021 – Vulnerable and Outdated Components","GDPR Article 32: Security of Processing (for organizations handling EU data via AI APIs)",{}]