LiteLLM Compromised: What the LiteLLM Breach Teaches Us About AI Gateway Risk
Akto, Friday, October 23rd, 2026
Akto breaks down the poisoned LiteLLM 1.107.0 release that shipped a credential stealer, with a timeline, IOCs and cleanup steps.
Akto says attackers published a poisoned LiteLLM release, version 1.107.0, to PyPI, GHCR and Docker Hub on October 21, 2026.
For about two hours, unpinned installs received a credential stealer and an hourly remote code loader, and the version was downloaded roughly 49,000 times before being quarantined.
It was the second LiteLLM compromise of 2026, and this one passed through hardened release controls with signed artifacts and valid provenance.
Akto covers the timeline, payload, remediation steps and what the incident says about AI gateways as targets.