LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys

Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway between enterprise applications and AI providers such as OpenAI, Anthropic, and Google. The flaws could let a low-privileged user take full control of the gateway, read sensitive files, execute arbitrary code, and harvest provider API keys.