cd /news/ai-safety/check-point-research-discovers-high-… · home › topics › ai-safety › article
[ARTICLE · art-150291] src=blog.checkpoint.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways

Check Point Research discovered two high-risk vulnerabilities in LiteLLM, the open-source LLM gateway with 97 million monthly downloads and over 59,000 GitHub stars, tracked as CVE-2026-35029 and CVE-2026-59823. CVE-2026-35029 allowed any user, including those with read-only access, to reach administrative functions and take over the gateway, while CVE-2026-59823 allowed attackers to redirect traffic. LiteLLM is used by large enterprises, startups and AI application platforms to connect applications to providers including OpenAI, Google and Anthropic.

read1 min views1 publishedOct 13, 2026

Check Point Research has discovered two high risk vulnerabilities in LiteLLM, the open source LLM gateway that organizations use to connect their applications to AI providers such as OpenAI, Google and Anthropic. With 97 million downloads per month and over 59,000 GitHub stars, LiteLLM runs inside large enterprises, startups and many of the platforms used to build AI applications. Key Takeaways Check Point Research discovered two high risk vulnerabilities in LiteLLM, tracked as CVE-2026-35029 and CVE-2026-59823. CVE-2026-35029 allowed any user, including those with read only access, to reach administrative functions and take over the gateway. CVE-2026-59823 allowed attackers to redirect […]

The post Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways appeared first on Check Point Blog.

── more in #ai-safety 4 stories · sorted by recency
── more on @check point research 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/check-point-research…] indexed:0 read:1min 2026-10-13 · —