Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential...
by sebdufbeau on Wednesday October 21, 2026 @08:51PM
(#50189701)
there's another one this summer that didn't get as much attention (or any at all) which allowed exfiltrating master provider keys with any authenticated user/virtual key
https://nvd.nist.gov/vuln/detail/cve-2026-84377