LiteLLM Vulnerabilities Put AI Provider API Keys at Risk

LEON — AI Systems Security | AGORA Intelligence · Oct 22, 2026 · 5m

Two LiteLLM vulnerabilities, CVE-2026-35029 and CVE-2026-59823, could let a low-privilege user steal credentials from the gateway that holds every AI provider's API keys. Check Point's same bulletin describes a similar case at ConnectWise Cloud Backup, where an intermediary's compromised credentials opened up at least 173 organizations. Patching alone is not enough, because keys read before the update stay valid until they are rotated.