Topic

LiteLLM: news, advisories and analysis

9 articlesUpdated 23 Oct 2026

CyberSecureToday covers LiteLLM across 9 articles published between 10 Sep 2026 and 23 Oct 2026. The coverage includes 7 vulnerability advisories and 2 analysis or guidance pieces. 7 advisories are rated critical or high severity.

Stories on LiteLLM most often intersect with BerriAI, AI Security and AI Infrastructure, with Technology, Cloud & SaaS the most affected sector. The most recent story, “LiteLLM Pipeline Hijacked in Software Supply Chain Attack Deploying InfoStealer and RAT”, was published 23 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
LiteLLM Pipeline Hijacked in Software Supply Chain Attack Deploying InfoStealer and RAT
Attackers hijacked LiteLLM release workflows using leaked GitHub CLI OAuth tokens, publishing backdoored packages to PyPI and Docker Hub executing LLMjacking.
Mei-Lin Chen23 Oct 202614 min read
ThreatsCloud & SaaSCritical
LiteLLM Gateway SQL Injection Vulnerability in Vector Search Metadata Filter Allows Backend Database Takeover
A critical SQL injection flaw in LiteLLM Proxy's vector metadata filtering allows unauthenticated API consumers to execute arbitrary PostgreSQL queries.
CST Editorial Desk10 Oct 20268 min read
ThreatsCloud & SaaSCritical
LiteLLM AI Model Gateway Vulnerability Allows Unauthenticated JWT Signature Bypass and Private LLM Hijacking (CVE-2026-55102)
A critical vulnerability in LiteLLM AI Proxy allows unauthenticated actors to forge JWT tokens and hijack enterprise foundational model pipelines.
Aisha Noor9 Oct 20268 min read
ThreatsCloud & SaaSHigh
LiteLLM JWT Flaw Lets Unverified Tokens Seize Proxy Admin Accounts, No Fix Yet
LiteLLM CVE-2026-93355 lets a signed JWT with an unverified email claim seize any account, including proxy_admin. No fix yet; cache-leak and SSRF CVEs patched.
Aisha Noor3 Oct 20266 min read
ResearchCloud & SaaS
Google GTIG: AI-Found Bugs Skew Toward Code Execution as Exploited Vulnerabilities Outpace All of 2025
GTIG's AI-era report: CVE disclosures doubled in 2026, 141 bugs exploited by August vs 127 in 2025, and 50% of AI-discovered flaws lead to RCE, per Google.
Priya Raman3 Oct 20267 min read
ThreatsCloud & SaaSCritical
LiteLLM Proxy Request Validation Bypass Exposes Cloud Metadata to SSRF Exploitation CVE-2026-59823
A critical server-side request forgery flaw in LiteLLM AI proxies allows remote attackers to bypass egress restrictions and steal cloud instance credentials.
Aisha Noor27 Sep 20268 min read
ThreatsCloud & SaaSCritical
LiteLLM MCP Server Creation Flaw CVE-2026-30623 Enables Remote Code Execution via Malicious Tool Configurations
Critical CVSS 9.8 flaw CVE-2026-30623 in LiteLLM allows remote attackers to execute arbitrary operating system commands via unvalidated Model Context Protocol server parameters.
Mei-Lin Chen21 Sep 202614 min read
ThreatsCloud & SaaSCritical
LiteLLM Pre-Authentication SQL Injection Flaw Exposes Enterprise Master Keys and AI Model Routing Gateways
LiteLLM releases urgent patch for CVE-2026-42208, a pre-auth SQL injection flaw allowing unauthenticated remote attackers to dump LLM proxy master credentials.
CST Editorial Desk20 Sep 202614 min read
InsightsCloud & SaaS
Nearly 1 in 10 Exposed LiteLLM AI Gateways Leaked Master Admin Keys
Wiz Research discovered that 10% of internet-facing LiteLLM AI proxy gateways accepted the default documentation admin key sk-1234, leaking upstream model keys and cloud IAM tokens.
Aisha Noor10 Sep 20265 min read