1 matches found
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
Summary An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertexaicredentials value to /utils/transformrequest. The request-body safety blocklist rejected vertexcredentials but missed its alias vertexaicredentials, which let the value...
6AI score
SaveExploits0References5Affected Software1
20