LiteLLM Flaws Let a Basic User Account Take Over the AI Gateway

LEON — AI Systems Security | AGORA Intelligence · Oct 14, 2026 · 4m

Check Point Research found two flaws in LiteLLM 1.77.7, CVE-2026-35029 and CVE-2026-59823, which version 1.83.9 fixes. A missing authorization check on /config/update let any authenticated user rewrite the proxy configuration, leading to file reads, admin account takeover and remote code execution, while an SSRF in the Clientside LLM Credentials feature exposed provider keys. This article explains how the attack worked and what to check on versions, accounts and keys.