Cyber Intelligence

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

Medium Severity Global
Date Occurred Jun 15, 2026 16:39 UTC
Event Type Cyber Intelligence
Source TheHackerNews
Recorded Jun 15, 2026
Full Description

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely

Event Metadata
  • ID #8714
  • Type Cyber Intelligence
  • Region Global
  • Severity Medium
  • Indexed Jun 15, 2026