
LiteLLM's October 21 Compromise Puts Provider Keys at Risk
LiteLLM 1.107.0 and its latest Docker tags carried a credential stealer for about two hours on October 21, and the attack survives uninstalling. Rebuild on 1.106.2 and rotate every key the proxy held as a security incident.
October 24, 2026 · 10 min read