LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys

Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers including OpenAI, Anthropic and Google. The flaws could let a user with minimal privileges take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys of the connected AI providers.

Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys an … The post LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys https://www.itsecurityguru.org/2026/10/13/litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys/ appeared first on IT Security Guru https://www.itsecurityguru.org .