AIDEFEND SecureFlow / SecureFlow Case Index

LiteLLM 1.107.0: An Unrevoked Agent Key Reaches the Signed Release Pipeline

• AI Infrastructure
• System Compromise & RCE
• Data Exfiltration

On October 21, LiteLLM, a Python library and gateway for accessing model providers, published a credential-stealing 1.107.0 release through its legitimate build and signing pipeline. The vendor's October 23 investigation traces entry to an unrevoked master key leaked from its experimental Agent Platform, followed by theft of an organization-owner GitHub token. Separate CI runs stole two maintainer tokens. Consumer-side admission of previously approved exact bytes, and revocation at each credential issuer, address boundaries that a valid release signature did not protect.