TLDR Tech / InfoSec
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
A LiteLLM proxy bug chain lets a basic internal user mint overbroad API keys, escalate themselves to proxy admin, and then run arbitrary Python guardrail code for full server takeover. Attackers can dump all AI provider keys, decrypt stored credentials, and read prompts, responses, and other sensitive data flowing through the gateway. With callback hooks, they can silently alter agent responses and spawn reverse shells, and must be stopped by upgrading to v1.83.14‑stable or later, auditing admins, callbacks, and rotating exposed secrets.
Read the full story