{"data":{"id":"8c01861e-63d6-43bf-abe0-44e447958159","title":" Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise","summary":"LiteLLM is an open-source AI gateway that manages connections to multiple LLM providers, and researchers found that nearly 1 in 10 publicly accessible instances had no authentication or used a default master key, allowing attackers to gain access. Beyond the expected risk of API abuse (LLMjacking, where attackers run up costs using your account), the researchers discovered multiple critical vulnerabilities including authentication bypass via the MCP endpoint (CVE-2026-59822), remote code execution (RCE, where attackers can run commands on the server) through custom code guardrails (CVE-2026-59821), and credential theft via pass-through endpoints, potentially compromising the entire cloud environment.","solution":"All vulnerabilities have been responsibly disclosed to LiteLLM and patches are available. Organizations should update to patched versions that address CVE-2026-59822, CVE-2026-59821, and the unauthenticated admin access issue.","labels":["security"],"sourceUrl":"https://www.wiz.io/blog/off-guard-breaking-litellm-from-authentication-bypass-to-cloud-compromise","publishedAt":"2026-09-09T16:06:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["supply_chain","prompt_injection","data_extraction"],"issueType":"news","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["LiteLLM","OpenAI","Anthropic","AWS Bedrock","Azure","Google Vertex AI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-09T16:06:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}