LiteLLM 曝两处安全漏洞 需升级至 1.83.9
安全研究机构 Check Point Research 在开源 AI 网关 LiteLLM 中发现两个漏洞：其一是访问控制缺陷（CVE-2026-35029，严重度 8.7/10），低权限用户可触达网关核心配置的管理员功能，进而读取服务器文件、覆盖管理员凭据、下载并运行恶意软件；其二是服务端请求伪造漏洞（CVE-2026-59823，5.3/10），可诱导网关向第三方服务器发送携带 AI 厂商 API 密钥的请求，从而泄露凭据。LiteLLM 已在 1.83.9 版本修复这两个问题，凡运行低于该版本的环境均受影响，研究方建议尽快升级、轮换可能暴露的密钥并核查实际权限。报道称 LiteLLM 支持约 140 家 AI 厂商，GitHub 月下载量超过 9000 万次、星标逾 6.1 万，且常被间接嵌入其他平台与内部工具中。
AI 网关集中存放可计费的厂商密钥，一旦被攻破，影响面可能同时覆盖大量 AI 部署。
- Two LiteLLM flaws let low-privileged users gain administrative control and execute malicious code
- Attackers could also steal AI provider API keys through a server-side request forgery bug
- Organizations should upgrade to LiteLLM 1.83.9+ and rotate potentially exposed credentials
Security researchers recently discovered two vulnerabilities in a popular AI gateway that allowed threat actors to take complete control of the system, steal sensitive files and AI provider API keys, and execute malicious code remotely.
The AI gateway in question is called LiteLLM. It is an open source solution allowing users to connect their applications to large language models (LLM) from different providers, including the likes of OpenAI and Anthropic.
The connection goes through a single interface, where users can route requests, manage API keys, control user access, and monitor things like usage and costs.
Right now, LiteLLM supports some 140 AI providers and has become quite popular - it has more than 90 million monthly downloads on GitHub, and more than 61,000 stars.
LiteLLM
However, security experts from Check Point Research (CPR) recently found two bugs in LiteLLM.