LiteLLM exposed to CVE-2026-93355 account takeover vulnerability; 1.100.1 still not fixed
CVE-2026-93355: Account Takeover in LiteLLM
AI summary
OX Research discloses an account takeover vulnerability in LiteLLM, CVE-2026-93355 (CWE-290, CVSS 8.8), where an attacker can use a legitimately signed JWT to impersonate any existing user, including proxy_admin. LiteLLM is an open-source AI gateway that unifies proxying over 100 LLM APIs including OpenAI, Anthropic, Azure, Bedrock, and Vertex AI, and centrally stores upstream API keys, usage, and virtual keys.
Why it was selected
披露了 LiteLLM 未修复的账号接管漏洞，并给出 IdP 侧可立即落地的临时缓解措施，供部署该网关的团队排查。