LiteLLM Session JWT Forged Using Default Master Key sk-1234

Arnold Chan@slaz

•updated Sep 12, 2026•0•0•1

Detects the use of the default, hardcoded 'sk-1234' secret key for HS256 JWT signing in LiteLLM proxy logs. This configuration is insecure and allows for the forgery of arbitrary user session tokens.