694 matches found
EXPLOIT-CVE-2026-33634
CVE-2026-33634 — LiteLLM supply chain + SSRF без apibase PoC / Lab ⚠️ Намеренно уязвимая лаборатория, для образовательного и авторизованного использования. Запускайте только на своей машине, против контейнеров этого репозитория. Прочитайте SECURITY-NOTES.md перед началом. 🚫 НИКОГДА не запускайте...
CVE-2026-42208-Lab
CVE-2026-42208 — PoC тайминговой SQL-инъекции LiteLLM до аутентификации Локальный Docker-лабораторный стенд и PoC с минимальным вредом для CVE-2026-42208 — уязвимости SQL-инъекции до аутентификации в пути проверки API-ключей LiteLLM Proxy. Этот репозиторий демонстрирует разницу между уязвимым...
CVE-2026-42208_lab
SQL-инъекция в LiteLLM Proxy GHSA-r75f-5x8p-qvmc Среда воспроизведения SQL-инъекции в процессе аутентификации по API-ключам в LiteLLM Proxy. Сводка по уязвимости Пункт| Детали ---|--- Уведомление| GHSA-r75f-5x8p-qvmc Тип| SQL-инъекция CWE-89 Критичность| Критическая Затронутые версии| litellm...
threat-intel-brief-cve-2026-42208-litellm
위협 인텔리전스 브리핑 - CVE-2026-42208: BerriAI LiteLLM SQL 인젝션 CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc CVSS 점수: 9.3 치명적 영향을 받는 소프트웨어: BerriAI LiteLLM 버전 = 1.81.16, 1.83.7 수정 버전: 1.83.7-stable 2026년 4월 19일 릴리스 CISA KEV 등록: 2026년 5월 8일 출처: CISA KEV, Sysdig TRT, The Hacker News, Security Affairs 요약...
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
ImpactAny authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramete...
LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
SummaryA server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect theproxy's outbound request to a host of their choosing by smuggling an apibase inside theuserconfig request body, bypassing the existing parameter guard. DetailsLiteLLM Proxy validates request bodies with...
BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...
LiteLLM: MCP Proxy Has Improper Authentication
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...
BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader
A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function loadopenapispecasync of the file litellm/proxy/experimental/mcpserver/openapitomcpgenerator.py of the component MCP OpenAPI Spec Loader. This manipulation of the argument specpath causes...
BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints
A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function asyncprecallhook of the file enterprise/enterprisehooks/bannedkeywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The attack ma...
LiteLLM: SSO Debug Flow Has Improper Authentication
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploi...
BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure
A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function uiviewusers of the file litellm/proxy/managementendpoints/internaluserendpoints.py of the component Incomplete Fix CVE-2025-0628. Such manipulation leads to improper authorization. I...
LiteLLM: M2M JWT Handler Has Improper Authorization
A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/userapikeyauth.py of the component M2M JWT Handler. Such manipulation leads to improper authorization. The attack can be launched remotely. A high complexity level is...
LiteLLM: Admin Key Handler Has Improper Authorization
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/managementendpoints/keymanagementendpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated...
LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticateuser of the file litellm/proxy/auth/loginutils.py of the component PROXYADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated...
CVE-2026-42208
✦ CVE-2026-42208 — критическая SQL-инъекция в LiteLLM 🧭 Обзор CVE-2026-42208 — это критическая уязвимость SQL-инъекции до аутентификации , затрагивающая AI-шлюз LiteLLM. Она позволяет злоумышленникам эксплуатировать запросы к серверной базе данных без аутентификации , что потенциально раскрывает...
poc_cve-2026-42208
CVE-2026-42208 — SQL-инъекция LiteLLM до аутентификации Лабораторная среда для воспроизведения и обнаружения CVE-2026-42208 — критической SQL-инъекции до аутентификации в LiteLLM, при которой неочищенные Bearer-токены попадают в необработанный запрос PostgreSQL. Обзор уязвимости Поле| Детали...
GHSA-3CV6-JPF6-8222 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...
