294 out of 3,074 LiteLLM gateways still accepted "sk-1234", the sample key in the documentation

Nearly one in ten AI gateways exposed by Wiz opened their administrator access with the key given as an example in the installation guide, delivering supplier keys and access to the cloud infrastructure.

LiteLLM is an open-source gateway that companies insert between their applications and the model providers they pay for. It therefore concentrates, by design, vendor API keys, database identifiers, user data, expense statements, and administration credentials. By scanning the exposed instances on the internet, Wiz researchers found 294 out of 3,074 that accepted sk-1234 — the example administrator key in the project's installation guide.

The result is not a simple read access: in the tests conducted, this key made it possible to retrieve supplier keys and, from there, to reach IAM permissions in the cloud of the organizations concerned. A LiteLLM control plane left as is thus a prime target for those looking for cloud credentials, AI service keys or an entry point to the connected infrastructure.

The subject is not limited to a forgotten password. The American agency CISA added a LiteLLM flaw to its catalog of actively exploited vulnerabilities on September 2, and CVE-2026-59822 (CVSS score 8.8), also discovered by Wiz, allows an unauthenticated attacker to open a valid MCP session with any Bearer token, including a single character.