Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

A recent scan of internet-facing LiteLLM servers found that nearly one in ten accepted the example admin key provided in the setup guide. This key serves as the administrator credential for the LiteLLM gateway, which is an open-source AI gateway used to connect applications to model providers. The fact that so many servers accepted this key suggests a significant security risk, as anyone with the key can access the gateway. The key in question is "sk-1234", which is explicitly mentioned in LiteLLM's own setup guide. As a result, anyone who holds this key can read every piece of information handled by the gateway. This vulnerability underscores a potential issue with the security configurations of these LiteLLM servers.