LiteLLM
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Threat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Vulnerability reported by Zero Day Initiative BlogGitLab CVSS 10.0 flaw targeted on Alpine Linux server; Ivanti, LiteLLM and UAT-6275 also reported
Recent news
Stolen enterprise AI model access resold via LLM Mixers, with victim cloud bills reaching $1 million
Google Threat Intelligence Group reports LLMjacking campaigns in which attackers steal cloud identity tokens and LLM API keys, then route requests through criminal gateways called LLM Mixers that resell access. Fake charges can exceed $100,000 a day, and some cumulative bills reached $1 million before keys were revoked. Attackers often test keys with single-token requests first, so low-volume activity can slip under spend-based alerts.
October 2026 roundup lists cyberattacks on Binance, PHP, Node.js, LiteLLM and the Pentagon
A roundup of October 2026 security incidents covers a cryptocurrency platform, developer infrastructure, certificate authorities, government records, gaming accounts and retail operations. The headline names Binance, PHP, Node.js, LiteLLM and the Pentagon, but the excerpt is truncated and gives no details of the attacks. The article notes that confirmed breaches, malicious releases, vulnerable configurations and possible credential exposure need separate handling.
GitLab CVSS 10.0 flaw targeted on Alpine Linux server; Ivanti, LiteLLM and UAT-6275 also reported
Alpine Linux said on 28 October that an attacker tried to exploit GitLab flaw CVE-2026-97229 (CVSS 10.0) on its GitLab server a week after the fix was released, with no evidence of success. Roundups also cover actively exploited Ivanti Connect Secure and Windows Shell bugs, LiteLLM gateway flaws fixed in version 1.83.9, and Talos and Recorded Future research on UAT-6275, a Kazakhstan-nexus group targeting CIS governments.