LiteLLM Authentication Bypass Opens AI Gateway to Unauthenticated RCE

LiteLLM sits at the heart of AI infrastructure, controlling traffic between applications and LLM providers while managing sensitive API keys and credentials. The vulnerability is being actively exploited and can chain with another CVE to bypass authentication entirely, giving attackers unauthenticated remote code execution. Organizations using LiteLLM must prioritize patching immediately, as CISA's inclusion in its Known Exploited Vulnerabilities catalog confirms real-world attacks are already underway.