One Proxy, Every Key — The AI Gateway Is Breached — severe-but-plausible scenario — ITOL

Vector: Cyber · Severity: severe

The bank routes every AI model call through one gateway. It holds the provider keys, issues virtual keys to teams, meters spend, and fronts the tool connections that let agents reach databases and repositories. An authentication bypass, or the default master key from the quick-start guide, opens it. The attacker reads every provider key from memory, learns which providers answer, runs their own workloads on the bank's quota, calls the bank's tools, and nothing goes down. The first sign is a bill.