Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
Overview
Wiz Research recently discovered that nearly 10% of internet-facing LiteLLM servers were vulnerable due to accepting the default admin key 'sk-1234'. This key, which is provided in LiteLLM's own setup guide, allows full administrative access to the gateways. LiteLLM is an open-source AI gateway software that connects applications to AI model providers. The fact that so many servers are still using this default credential poses a significant security risk, as anyone with this key can read sensitive information. Organizations using LiteLLM need to change this default key immediately to prevent potential unauthorized access to their systems.
Key Takeaways
- Affected Systems: LiteLLM gateways
- Action Required: Change the default admin key 'sk-1234' to a unique, strong password.
- Timeline: Newly disclosed
Original Article Summary
Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. That key is the gateway's administrator credential. Anyone who holds it can read every
Impact
LiteLLM gateways
Exploitation Status
The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.
Timeline
Newly disclosed
Remediation
Change the default admin key 'sk-1234' to a unique, strong password.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.