LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 let low-privileged users take over AI gateways and steal provider API keys
Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open-source AI gateway that sits between enterprise applications and providers such as OpenAI, Anthropic and Google. A user with minimal privileges could take full control of the gateway, read sensitive files, execute arbitrary code and harvest the provider API k…