LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

Obsidian Security disclosed a three-CVE chain in LiteLLM that lets a low-privilege account bypass route checks, escalate to proxy_admin, and achieve remote code execution (RCE), exposing provider keys, decrypted credentials, database access, and all requests/responses routed through the proxy; upgrade to LiteLLM v1.83.14-stable or later and audit proxy_admin accounts, guardrails, callbacks, and stored secrets.