LiteLLM: two flaws let attackers steal AI API keys and take over servers
Check Point Research has detailed two vulnerabilities in LiteLLM, a gateway that connects apps to models from OpenAI, Anthropic and Google. Users with limited access could exploit them to hijack API keys or take control of a server; fixes have been available since April.