published 2026-09-09
An attacker can get into LiteLLM without logging in, for example by using default keys or unauthenticated MCP sessions, and run code at the root level. From there they can steal cloud IAM credentials and take over the cloud AI infrastructure.
Source: wiz.io
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1754 and your operating system.