CRITICALAdvisoryOct 22, 2026
Action required
Identify all systems running LiteLLM 1.107.0 in your environment immediately. Upgrade to patched version. Scan process execution logs and Python startup hooks for suspicious activity. Assume all cloud and API credentials used by affected systems are compromised and rotate them now.
Affected products
LiteLLMSocket (AI scanner)Upwind (security investigation)
Linked articles