Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
Summary: LiteLLM disclosed that a master key for its Agent Platform, accidentally committed to the public LiteLLM-Labs/lite-harness repository on May 27, 2026, was never revoked and was used on October 10, 2026 from 69.48.229[.]143 to extract an unscoped GitHub CLI OAuth token tied to the organization owner's account. The attacker then repointed the deployer to a malicious repository and used two tokens to trigger and approve a release, after LiteLLM had relaxed its rule requiring approval from an account locked to a physical office device so that any two engineers could trigger and approve releases.
What you should know: A single unrevoked key gave an attacker owner-level access to every repository in the organization, and the malicious workflows pushed to short-lived ci-tmp branches harvested credentials for Anthropic, OpenAI, AWS Bedrock, Linear, and GitGuardian's own secret-scanning tenant - the platform that would have raised the alert.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026