Hackers Exploit LiteLLM Admin API Flaw to Steal Secrets and Target AI Gateway Servers
Brief
Attackers are actively probing LiteLLM AI gateway deployments for a known authorization flaw that can turn a low-privilege account into full administrative control.
The issue, tracked as CVE-2026-35029, affects LiteLLM versions before 1.
- 0 and allows authenticated users to access the sensitive /config/update endpoint without the required administrator role.
LiteLLM acts as an AI gateway between enterprise applications and model providers. It can store provider API keys, database connection details, user data, spending records, and administrative credentials.
This makes exposed LiteLLM control planes a valuable target for attackers seeking cloud credentials, AI service keys, or a path into connected infrastructure. The vulnerability stems from the absence of an authorization check on the /config/update API route.