LiteLLM: ~9.6% of public gateways accept default sk-1234 / no auth (Wiz)
Wiz Research (Amitai Cohen & Yaara Shriki, 9 September 2026; also THN same day) scanned ~3,074 internet-facing LiteLLM AI gateways: 294 (9.6%) accepted the docs/Docker default master key sk-1234 or required no authentication (191 of those had no key at all). Default/missing master key grants admin and exposes every configured LLM provider API key (LLMjacking), and can chain to post-auth custom-code-guardrail RCE CVE-2026-59821 (fixed v1.82.0) for root-in-container when still on vulnerable builds. Same research covers MCP auth bypass CVE-2026-59822 (already on this desk; CISA KEV; Wiz honeypot exploitation). LiteLLM still ships sk-1234 as the example/default in common install paths. Mitigate: set a unique strong master key immediately; upgrade past 1.82.0/1.84.0; review custom guardrails and pass-through endpoints. Category tech (AI gateway stack). Primary: Wiz; wire: THN. Distinct card from cve-2026-59822.
- Product
- BerriAI LiteLLM (open-source LLM gateway)
- Versions
- Default sk-1234 / missing master key on exposed instances; CVE-2026-59821 before 1.82.0; CVE-2026-59822 before 1.84.0
- Exploited in Australia?
- unknown
- Patch to
- Replace sk-1234 with a unique master key; upgrade LiteLLM >=1.84.0; audit guardrails and pass-through URLs
Primary: Wiz — Breaking LiteLLM (9 Sep 2026) · Vendor: BerriAI LiteLLM security advisories · CVE: CVE-2026-59821, CVE-2026-59822 · The Hacker News (10 Sep 2026)