[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9QQh71QvybA2q8zGP7Vuuo8ss4cd1TalnEGxEiPgX_o":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":34},"19d0f85c-5c36-4960-a8f1-7b4ce07d1d0c","LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys","litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys-a7f356","Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys an […] The post LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys appeared first on IT Security Guru.","Check Point Research has identified two critical vulnerabilities in LiteLLM, an open-source AI gateway used to connect enterprise applications with AI providers like OpenAI and Google. These flaws could enable a low-privileged user to gain complete control over the gateway, access sensitive files, run unauthorized code, and steal API keys from various AI services.","LiteLLM gateway flaws allow low-privilege users to hijack AI access and steal API keys.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F10\u002F13\u002Flitellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys\u002F?utm_source=rss&utm_medium=rss&utm_campaign=litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys",null,"2026-10-13T14:53:38+00:00","2026-10-13T18:00:10.163256+00:00",8,[17,20,23,25,27],{"name":18,"type":19},"LiteLLM","product",{"name":21,"type":22},"Check Point Research","vendor",{"name":24,"type":22},"OpenAI",{"name":26,"type":22},"Google",{"name":28,"type":29},"AI gateway","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":12,"name":32,"slug":33},"Vulnerabilities","vulnerabilities",[35,37,42,47],{"category":36},{"id":30,"icon":12,"name":32,"slug":33},{"category":38},{"id":39,"icon":12,"name":40,"slug":41},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":43},{"id":44,"icon":12,"name":45,"slug":46},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":48},{"id":49,"icon":12,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[26,21,24],{"controls":55,"vendors":139},[56,84,110],{"slug":57,"name":58,"problem":59,"products":60},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[61,69,76],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":57,"product_name":73,"url":74,"description":75},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"slug":85,"name":86,"problem":87,"products":88},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[89,94,102],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":90,"product_name":91,"url":92,"description":93},"idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"slug":111,"name":112,"problem":113,"products":114},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",[140],{"slug":141,"name":142,"logo_path":143,"roles":144},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png",[145],"reported_by",{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":163},"critical-litellm-flaws-allow-privilege-escalation-and-api-key-theft","Critical LiteLLM Flaws Allow Privilege Escalation and API Key Theft","Two critical vulnerabilities in LiteLLM, a widely-used open-source AI gateway, allow low-privileged users to escalate privileges, traverse directories, execute arbitrary code, and steal API keys connecting to major AI providers. The root issue stems from insufficient input validation and improper authorization enforcement within the gateway's request handling logic. This is particularly dangerous in enterprise environments where AI gateway credentials—such as OpenAI or Google API keys—carry significant financial and operational value. A single compromised key could enable unauthorized AI usage at scale, expose proprietary data sent through the gateway, and result in substantial cost liability. The incident highlights how rapidly adopted AI infrastructure components can introduce systemic risk if not subjected to the same security rigor as traditional enterprise software.",[151,152,153,154,155,156,157,158,159,160,161,162],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Controlled Use of Administrative Privileges","CIS Control 14: Controlled Access Based on the Need to Know","CIS Control 16: Account Monitoring and Control","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 SC-28: Protection of Information at Rest","NIST SP 800-53 AU-12: Audit Record Generation","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","OWASP API Security Top 10 - API1: Broken Object Level Authorization","OWASP API Security Top 10 - API3: Broken Object Property Level Authorization","GDPR Article 32: Security of Processing (for EU-regulated environments handling personal data via AI APIs)",{}]