--- title: LiteLLM Vulnerability Chain: What Security Teams Running... description: A critical vulnerability chain in LiteLLM (CVSS 9.9) allows any low-privilege user to escalate to full admin and execute arbitrary code on the gateway host.... canonical: https://daily.dev/posts/litellm-vulnerability-chain-what-security-teams-running-ai-gateways-need-to-do-now-2dh1t9pl9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now | daily.dev og:description: A critical vulnerability chain in LiteLLM (CVSS 9.9) allows any low-privilege user to escalate to full admin and execute arbitrary code on the gateway host.... og:url: https://daily.dev/posts/litellm-vulnerability-chain-what-security-teams-running-ai-gateways-need-to-do-now-2dh1t9pl9 og:image: https://api.daily.dev/og/posts/2Dh1T9Pl9.png og:image:alt: LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now **[Latest Hacking News](https://daily.dev/sources/lhn)** · 5 min read · 0 upvotes · 0 comments ## Summary A critical vulnerability chain in LiteLLM (CVSS 9.9) allows any low-privilege user to escalate to full admin and execute arbitrary code on the gateway host. The three-CVE chain (CVE-2026-47101, CVE-2026-47102, CVE-2026-40217) exploits a route bypass, an unrestricted user update endpoint, and an unsafe exec() in Custom Code Guardrails. A separate unauthenticated RCE (CVE-2026-42271) affecting versions 1.74.2–1.83.6 is already in CISA's Known Exploited Vulnerabilities catalog with a June 22 remediation deadline. A successful exploit exposes all provider API keys (OpenAI, Anthropic, Azure, AWS Bedrock), in-flight prompts, and MCP OAuth tokens. Immediate actions: upgrade to v1.83.14-stable, rotate all provider API keys, audit proxy_admin accounts, disable Custom Code Guardrails if unused, and block MCP REST test endpoints at the network perimeter. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw](https://daily.dev/posts/hackers-are-exploiting-a-critical-litellm-pre-auth-sqli-flaw-zfoa4stcb) · BleepingComputer · 0 upvotes · 0 comments - [Critical Flaw in Langflow AI Platform Under Attack](https://daily.dev/posts/critical-flaw-in-langflow-ai-platform-under-attack-fz5dbqsfo) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-gateway](https://daily.dev/tags/ai-gateway) [View this post on daily.dev](https://daily.dev/posts/litellm-vulnerability-chain-what-security-teams-running-ai-gateways-need-to-do-now-2dh1t9pl9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now","url":"https://daily.dev/posts/litellm-vulnerability-chain-what-security-teams-running-ai-gateways-need-to-do-now-2dh1t9pl9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/litellm-vulnerability-chain-what-security-teams-running-ai-gateways-need-to-do-now-2dh1t9pl9"},"datePublished":"2026-06-16T08:20:23.767Z","dateModified":"2026-06-16T08:20:46.073Z","description":"A critical vulnerability chain in LiteLLM (CVSS 9.9) allows any low-privilege user to escalate to full admin and execute arbitrary code on the gateway host....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ca3c956d23c4bacf6a5c060769962ce8?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ca3c956d23c4bacf6a5c060769962ce8?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Latest Hacking News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Latest Hacking News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/5110318ded6e43f1bb12facdeb2b1965","url":"https://daily.dev/sources/lhn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/litellm-vulnerability-chain-what-security-teams-running-ai-gateways-need-to-do-now-2dh1t9pl9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-gateway","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Latest Hacking News","item":"https://daily.dev/sources/lhn"},{"@type":"ListItem","position":3,"name":"LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now"}]} ```