Threat
CVE-2026-93355: Account Takeover in LiteLLM
First reported · Discovered ox.security
Page published
Earliest dated coverage: 29 Sep 2026 · First observed: 12 Oct 2026 · Latest dated coverage: 29 Sep 2026
Coverage timeline
Single-source advisory — one report is available.
Why it matters
CVE-2026-93355 lets an attacker take over admin accounts on LiteLLM, a widely used LLM gateway controlling API keys and access to major model providers, exposing credentials and spend across an organization's AI infrastructure.
CVE-2026-93355 is an authentication bypass (CWE-290, CVSS 8.8) in LiteLLM, the open-source gateway that manages access to OpenAI, Anthropic, and other LLM APIs and holds API keys. OX Research found that LiteLLM's JWT authentication silently falls back to an unverified email claim, letting an attacker authenticate as any existing user—including a proxy_admin—and permanently rebind the victim's SSO account to the attacker's token with a single request and no victim interaction. The flaw is confirmed through version 1.100.1 and listed as unpatched.