LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys

Two critical vulnerabilities in LiteLLM, a widely-used open-source AI gateway, allow low-privileged users to escalate privileges, traverse directories, execute arbitrary code, and steal API keys connecting to major AI providers. The root issue stems from insufficient input validation and improper authorization enforcement within the gateway's request handling logic. This is particularly dangerous in enterprise environments where AI gateway credentials—such as OpenAI or Google API keys—carry significant financial and operational value. A single compromised key could enable unauthorized AI usage at scale, expose proprietary data sent through the gateway, and result in substantial cost liability. The incident highlights how rapidly adopted AI infrastructure components can introduce systemic risk if not subjected to the same security rigor as traditional enterprise software.