Litellm

LiteLLM 1.107.0 shipped a credential stealer and RAT
LiteLLM's compromised 1.107.0 release stole provider keys, cloud credentials and its proxy database in a 2h41m window Oct 21; abuse was seen within 4.5 hours.
DeAI Newsroom · 22 Oct 2026 · 7 min
Security feeds flag a botnet living inside self-hosted AI stacks
Security X accounts are amplifying Lumen's PoeLLM findings: 3,400+ servers running LiteLLM and Ollama hijacked since April, with C2 hidden in a GitHub poem.
DeAI Newsroom · 12 Oct 2026 · 3 min
CISA adds LiteLLM MCP auth bypass CVE-2026-59822 to KEV
CISA's KEV catalog lists LiteLLM CVE-2026-59822 as actively exploited: a fabricated Bearer token reaches MCP tooling on unpatched proxies. Fix is v1.84.0.
DeAI Newsroom · 20 Sept 2026 · 5 min

Sponsor disclosure — not editorial

Powered by Morpheus and StrandCMS. Morpheus is a decentralized inference marketplace, covered on the same terms as every other provider. StrandCMS is the open-source, agent-first framework this site is built on.

Learn more →

Litellm

LiteLLM 1.107.0 shipped a credential stealer and RAT

Security feeds flag a botnet living inside self-hosted AI stacks

CISA adds LiteLLM MCP auth bypass CVE-2026-59822 to KEV