Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/27 3:32 p.m.•2 views

LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`

Summary An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertexaicredentials value to /utils/transformrequest. The request-body safety blocklist rejected vertexcredentials but missed its alias vertexaicredentials, which let the value...

6AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder