Executive Summary
Obsidian Security disclosed three chained LiteLLM vulnerabilities that let a default low-privilege account become admin and run code on the gateway, exposing every model provider key it holds.
What Happened
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenAI-compatible interface. A server takeover exposes every provider key it holds, the secrets that
Affected Products
- LiteLLM
Vulnerability / Attack Technique
Privilege escalation in an AI gateway
Technical Mechanism
As reported, three flaws together let a low-privilege user gain admin and execute code.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
An AI gateway concentrates every provider key. RealGround analysis: treat it as critical infrastructure.
Recommended Controls
- Update LiteLLM
- Disable default low-privilege accounts
- Rotate provider keys if exposed
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/06/litellm-vulnerability-chain-lets-low.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.