CVE-2026-59821 Security Incident affecting litellm
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks Reported affected versions include 0.1.0.
STABLE
What Happened
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks Reported affected versions include 0.1.0.
Why This Matters
Publisher reporting describes a concrete security event. BugSkan could not yet bind it to a CVE or affected version, so treat the source details as the current record.
Recommended Action
Upgrade litellm to 1.82.0 or later. Identify deployments of litellm matching the evidenced affected versions: 0.1.0.
Exposure
Exposure unknown
Apr 04, 2026 05:30
Exposure reason: This incident does not currently match a technology in My AI Stack.
Exploitation status: UNKNOWN
Affected versions: 0.1.0
Primary entities:
Authoritative Intelligence
Public GitHub References
Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.
GitHub API error: API rate limit exceeded for 68.178.145.130. (But here's the good news: Authenticated requests get a higher rate limit. Check out the documentation for more details.)
Timeline
-
Incident first seen
Mar 31, 2026 05:30BugSkan first recorded this incident.
-
How SentinelOne’s AI EDR Autonomously Discovered and Stopped Anthropic’s Claude from Executing a Zero Day Supply Chain Attack, Globally - sentinelone.com
Mar 31, 2026 05:30sentinelone.com · Vulnerability
-
AI startup Mercor confirms security incident linked to LiteLLM supply chain attack | brief | SC Media - SC Media
Apr 01, 2026 05:30scworld.com · Vulnerability
-
Mercor Hit by Supply Chain Attack via LiteLLM Breach - The Tech Buzz
Apr 01, 2026 05:30techbuzz.ai · Data Leak
-
Mercor says it was hit by cyberattack tied to compromise of open source LiteLLM project - TechCrunch
Apr 01, 2026 05:30techcrunch.com · Data Leak
-
Mercor, a $10 billion AI startup, confirms it was caught up in a major security incident - Fortune
Apr 02, 2026 05:30fortune.com · Data Leak
-
AI Firm Mercor Confirms Breach as Hackers Claim 4TB of Stolen Data - Hackread
Apr 03, 2026 05:30hackread.com · Data Leak
-
Meta Suspends Ties With Mercor Amid Fears Of Training Data Leak - The420.in
Apr 04, 2026 05:30the420.in · Data Leak
-
Claude Code Leak Weaponized With Malware in Security Crisis - The Tech Buzz
Apr 04, 2026 05:30techbuzz.ai · News
-
Meta paused its work with AI training startup Mercor after a data breach - Business Insider
Apr 04, 2026 05:30businessinsider.com · Data Leak
-
Latest observed development
Apr 04, 2026 05:30Most recent source or update associated with this incident.
Sources
sentinelone.com · Mar 31, 2026 05:30
A sophisticated multi-stage supply chain attack, initiated by compromising open-source security scanner Trivy to steal LiteLLM PyPI credentials, injected malicious versions (1.82.7, 1.82.8) of LiteLLM into customer environments. This enabled data exfiltration, system persistence, and lateral movement within Kubernetes clusters, notably leveraging AI coding assistants with unrestricted permissions as an unwitting infection vector.
Open publisher sourcescworld.com · Apr 01, 2026 05:30
The incident stems from a supply chain attack targeting the open-source LiteLLM project, where malicious code was injected. This compromise led to thousands of organizations, including AI startup Mercor, suffering data breaches and exfiltration of sensitive information.
Open publisher sourcetechbuzz.ai · Apr 01, 2026 05:30
An extortion group executed a supply chain attack by compromising the open-source LiteLLM project, which serves as a widely-used AI model API proxy. This breach led to the theft of sensitive data from AI recruiting startup Mercor, underscoring systemic vulnerabilities in the AI industry's reliance on unvetted open-source dependencies.
Open publisher sourcetechcrunch.com · Apr 01, 2026 05:30
Mercor, an AI recruiting startup, experienced a data breach following a supply chain attack on the open-source LiteLLM project, which involved the injection of malicious code into its packages. The Lapsus$ hacking group claimed responsibility for targeting Mercor and exfiltrating sensitive data, including Slack and ticketing information, as evidenced by shared samples.
Open publisher sourcefortune.com · Apr 02, 2026 05:30
A supply-chain cyberattack on the open-source LiteLLM library led to the planting of malicious code designed for credential harvesting. This incident resulted in a significant data breach at AI startup Mercor, potentially exposing sensitive company data, user information, and confidential AI project details.
Open publisher sourcehackread.com · Apr 03, 2026 05:30
AI firm Mercor confirmed a breach stemming from a supply chain attack involving the open-source LiteLLM PyPI package, where attackers published malicious versions after compromising maintainer credentials. This incident led to the alleged theft of 4TB of sensitive data, including candidate profiles, PII, source code, and API keys, subsequently listed by the Lapsus$ extortion group.
Open publisher sourcethe420.in · Apr 04, 2026 05:30
A security breach at AI data vendor Mercor potentially exposed sensitive AI training data, including proprietary methodologies and competitive intelligence, impacting clients like Meta. The incident is suspected to involve a supply chain attack via malicious code injected into the LiteLLM open-source library, used to steal credentials and facilitate data exfiltration.
Open publisher sourcetechbuzz.ai · Apr 04, 2026 05:30
Threat actors are weaponizing leaked Anthropic Claude AI source code by embedding malware, disguised as legitimate repositories, and distributing it to developers. This malicious distribution aims to install backdoors and credential harvesters on victims' systems, providing attackers with potential footholds into sensitive corporate and research networks.
Open publisher sourcebusinessinsider.com · Apr 04, 2026 05:30
AI training startup Mercor experienced a data breach resulting from a supply chain attack that leveraged the open-source project LiteLLM, impacting potentially thousands of companies. This incident prompted Meta to pause its collaboration with Mercor while a thorough investigation, supported by third-party forensics experts, is conducted.
Open publisher sourceMy AI Stack Match
Create an account to see which incidents overlap with your AI stack.