EXPOSURE LiteLLM
SEVERITY HIGH
PROBE GET :4000/health
Is your LiteLLM exposed?
Proxy without a master key: model catalog open, upstream API budget burnable by strangers.
Scan a host you own → Fix card Census
Why it matters
An open LiteLLM proxy exposes your model catalog and often lets strangers burn your upstream API budget through /v1/chat/completions.
How common is it?
7,336 LiteLLM instances are reachable in the Shodan index. Fingerprint match, not a verified zero-auth count · src: Shodan count · `http.html:"LiteLLM API - Swagger UI"` · 2026-08
Counts are population-level, from third-party indexes and my own honeypots. I never scan the internet and this page makes no claim about any specific host.
Fix it
The full walkthrough lives on the fix card, kept current in one place: