Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

Nearly one in ten internet-facing LiteLLM deployments accepted the example admin key 'sk-1234' straight from the documentation, granting attackers full administrative access without any exploitation of a software vulnerability. This represents a fundamental configuration management failure: organizations deployed production AI infrastructure using credentials explicitly marked as examples, not secrets. The consequences are severe — attackers can exfiltrate downstream API keys, harvest cloud IAM credentials, and hijack AI model workloads entirely. This incident highlights that as AI tooling proliferates rapidly, security hygiene fundamentals are being overlooked, and vendors disclaiming responsibility for default-credential misuse does not reduce real-world risk.