Wiz finds 9.6% of LiteLLM instances exposed

Wiz found 294 of 3,074 internet-facing LiteLLM instances—9.6%—accepted a default master key or required no authentication, and says patches are available for the disclosed flaws. Wiz’s advisory says one related CVE entered CISA’s Known Exploited Vulnerabilities catalog, turning an AI gateway’s configuration into a cloud-security concern because it can hold provider credentials and connect to MCP tools. Teams running LiteLLM should inventory public exposure, patch, and enforce unique credentials before expanding gateway scope; MCP’s stateless migration does not remove this deployment risk.