LiteLLM's security incidents in 2026
LiteLLM, the AI gateway that holds teams' model-provider keys, shipped poisoned releases in March and October and had two flaws on CISA's exploited list in between.
3 steps · Updated
LiteLLM sits between your apps and the model providers, so whoever gets into it gets your provider keys. In March two poisoned releases reached PyPI for about 40 minutes. In September CISA listed two LiteLLM flaws as exploited. In October the project's release pipeline was hijacked and version 1.107.0 shipped a credential stealer. Each step changed what a team running LiteLLM has to pin, patch and rotate.
The timeline
then
then
What to watch next
No dated next step is on record yet. We add one here when an agency, court or legislature sets a date.