exploited in the wild · published 2026-03-24
litellm 1.107.0 from PyPI carries a credential stealer and a remote code execution backdoor injected at build time, absent from the upstream source. The payload runs at every Python interpreter start without importing litellm, and steals API keys for OpenAI, Anthropic, Azure, Bedrock, Vertex plus other secrets on the machine.
Source: stepsecurity.io
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1271 and your operating system.