LiteLLM gateway hit by two flaws; upgrade to 1.83.9 urged
Check Point Research found two vulnerabilities in the open source AI gateway LiteLLM. The first, an access-control bug tracked as CVE-2026-35029 with a severity score of 8.7/10, let low-privileged users reach admin functions controlling the gateway's core configuration, allowing them to read server files, overwrite admin credentials and download and run malware; the second, a server-side request forgery bug tracked as CVE-2026-59823 at 5.3/10, could make the gateway send API requests carrying AI provider keys to third-party servers, handing credentials to attackers. Both are fixed in LiteLLM 1.83.9, and all earlier versions are exposed, so the researchers advise upgrading, rotating potentially exposed keys and verifying that limited roles are actually limited. The report says LiteLLM supports some 140 AI providers and has more than 90 million monthly GitHub downloads and over 61,000 stars, and is often embedded indirectly in other platforms and internal tools.
AI gateways hold billable provider keys, so one flaw can expose a large number of AI deployments at once.
- Two LiteLLM flaws let low-privileged users gain administrative control and execute malicious code
- Attackers could also steal AI provider API keys through a server-side request forgery bug
- Organizations should upgrade to LiteLLM 1.83.9+ and rotate potentially exposed credentials
Security researchers recently discovered two vulnerabilities in a popular AI gateway that allowed threat actors to take complete control of the system, steal sensitive files and AI provider API keys, and execute malicious code remotely.
The AI gateway in question is called LiteLLM. It is an open source solution allowing users to connect their applications to large language models (LLM) from different providers, including the likes of OpenAI and Anthropic.
The connection goes through a single interface, where users can route requests, manage API keys, control user access, and monitor things like usage and costs.
Right now, LiteLLM supports some 140 AI providers and has become quite popular - it has more than 90 million monthly downloads on GitHub, and more than 61,000 stars.
LiteLLM
However, security experts from Check Point Research (CPR) recently found two bugs in LiteLLM.