LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys

Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys an organisation uses to access its AI providers. LiteLLM is downloaded around 97 million times a month and has more than 59,000 stars on GitHu