{"slug": "litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys", "title": "LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys", "summary": "Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers including OpenAI, Anthropic and Google. The flaws could let a user with minimal privileges take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys of the connected AI providers.", "body_md": "Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys an […]\n\nThe post [LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys](https://www.itsecurityguru.org/2026/10/13/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys/) appeared first on [IT Security Guru](https://www.itsecurityguru.org).", "url": "https://wpnews.pro/news/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys", "canonical_source": "https://www.itsecurityguru.org/2026/10/13/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys/?utm_source=rss&utm_medium=rss&utm_campaign=litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys", "published_at": "2026-10-13 14:53:38+00:00", "updated_at": "2026-10-15 05:09:23.179165+00:00", "lang": "en", "topics": ["ai-safety", "ai-infrastructure", "ai-tools", "artificial-intelligence"], "entities": ["LiteLLM", "Check Point Research", "OpenAI", "Anthropic", "Google"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys", "markdown": "https://wpnews.pro/news/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys.md", "text": "https://wpnews.pro/news/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys.txt", "jsonld": "https://wpnews.pro/news/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys.jsonld"}}