India, Oct. 15 -- Check Point Research has discovered two high-risk vulnerabilities in LiteLLM, the open-source LLM gateway that organisations use to connect their applications to AI providers such as OpenAI, Google and Anthropic. With 97 million downloads per month and over 59,000 GitHub stars, LiteLLM runs inside large enterprises, startups and many of the platforms used to build AI applications.

Check Point Research identified two separate vulnerabilities in LiteLLM that, individually, gave an attacker with a basic user account a path to the most sensitive assets in an organisation's AI stack.

In practical terms, anyone holding an account on a vulnerable LiteLLM deployment could take over the gateway and use it for malicious purposes...