LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

Summary

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenAI-compatible interface. A server takeover exposes every provider key it holds, the secrets that

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.