Advisoriesby IbisBerriAI security advisories
46 advisories across LiteLLM
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`GHSA-g5ff-637f-6q2mfixed in 1.95.0LiteLLM vulnerable to reflected XSS in /sso/debug/callbackGHSA-hhww-mrg2-969hfixed in 1.85.0LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyCVE-2026-114612fixed in 1.100.4 +4LiteLLM: server-side request forgeryCVE-2026-84377fixed in 1.88.6 +8LiteLLM Proxy has server-side request forgery via the `user_config` request parameterCVE-2026-59823fixed in 1.83.9LiteLLM vulnerable to server-side template injection in the /prompts/test endpointCVE-2026-37004fixed in 1.83.7LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksCVE-2026-59821fixed in 1.82.0LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackCVE-2026-59822fixed in 1.84.0LiteLLM: Local file read via request-supplied OIDC file referencesCVE-2026-59819fixed in 1.83.10LiteLLM: Arbitrary file write via path traversal in Skills archive extractionCVE-2026-59820fixed in 1.83.7BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec LoaderCVE-2026-12798no fix yetBerriAI litellm: UI User Enumeration leads to System-Wide Information DisclosureCVE-2026-12799no fix yetLiteLLM: improper authorizationCVE-2026-12797no fix yetBerriAI litellm: SSO Login Does Not Invalidate Previous UI Session TokensCVE-2026-12796no fix yetLiteLLM: SSO Debug Flow Has Improper AuthenticationCVE-2026-12795no fix yetLiteLLM: MCP Proxy Has Improper AuthenticationCVE-2026-12773fixed in 1.84.0LiteLLM: Admin Key Handler Has Improper AuthorizationCVE-2026-12770no fix yetLiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session ExpirationCVE-2026-12772no fix yetLiteLLM: M2M JWT Handler Has Improper AuthorizationCVE-2026-12771no fix yetLiteLLM: Authentication Bypass via Host Header InjectionCVE-2026-49468fixed in 1.84.0LiteLLM allows a user to modify their own user_role via the /user/update endpointCVE-2026-47102fixed in 1.83.10LiteLLM: privilege escalationCVE-2026-47101fixed in 1.83.14LiteLLM has a sandbox escape in custom-code guardrailCVE-2026-40217fixed in 1.83.10LiteLLM: Authenticated command execution via MCP stdio test endpointsCVE-2026-42271fixed in 1.83.7LiteLLM has SQL Injection in Proxy API key verificationCVE-2026-42208fixed in 1.83.7LiteLLM: Server-Side Template Injection in /prompts/test endpointCVE-2026-42203fixed in 1.83.7LiteLLM: Password hash exposure and pass-the-hash authentication bypassGHSA-69x8-hrgq-fjj8fixed in 1.83.0LiteLLM: Authentication bypass via OIDC userinfo cache key collisionCVE-2026-35030fixed in 1.83.0LiteLLM: Privilege escalation via unrestricted proxy configuration endpointCVE-2026-35029fixed in 1.83.0Two LiteLLM versions published containing credential harvesting malwareGHSA-5mg7-485q-xm76no fix yetTwo litellm versions published containing credential harvesting malwarePYSEC-2026-2no fix yetMalicious code in litellm (PyPI)MAL-2026-2144no fix yetLiteLLM Has a Leakage of Langfuse API KeysCVE-2025-0330no fix yetLiteLLM Has an Improper Authorization VulnerabilityCVE-2025-0628fixed in 1.61.15LiteLLM Reveals Portion of API Key via a Logging FileCVE-2024-9606fixed in 1.44.12LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP RequestCVE-2024-8984fixed in 1.56.2LiteLLM Vulnerable to Remote Code Execution (RCE)CVE-2024-6825no fix yetLiteLLM Vulnerable to Denial of Service (DoS)CVE-2024-10188fixed in 1.53.1.dev1LiteLLM Server-Side Request Forgery (SSRF) vulnerabilityCVE-2024-6587fixed in 1.44.8litellm vulnerable to remote code execution based on using eval unsafelyCVE-2024-5751fixed in 1.40.16litellm vulnerable to improper access control in team managementCVE-2024-5710fixed in 1.40.15Arbitrary file deletion in litellmCVE-2024-4888fixed in 1.35.36SQL injection in litellmCVE-2024-4890no fix yetSQL injection in litellmCVE-2024-5225fixed in 1.40.0litellm passes untrusted data to `eval` function without sanitizationCVE-2024-4264no fix yetLiteLLM has Server-Side Template Injection vulnerability in /completions endpointCVE-2024-2952fixed in 1.34.42