Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example
Summary: Wiz Research scanned 3,074 internet-facing LiteLLM AI gateways in February and found 294 accepted sk-1234, the example admin key printed in LiteLLM's own setup guide, with 191 of those having no key set at all. Holding that key gives read access to every stored model provider API key and, in Wiz's tests, reached the cloud IAM credentials of the host machine, while the setup guide still used sk-1234 as of September 9.
What you should know: One admin credential on an AI gateway exposes every provider key it routes to and the cloud role it runs under, and Microsoft's August case shows attackers using exactly that position to read the master key, provider keys and database connection string and copy records from LiteLLM's model and virtual-key tables. LiteLLM's security policy lists missing-master-key setups as explicitly out of scope, so there is no CVE and no patch for the pass-through route to instance metadata - outbound network limits and narrow IAM roles are the only controls.
Read the original at The Hacker News ↗
- Mentions
- CVE-2026-40217CVE-2026-59821
- Related