PT-2026-100561

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100817

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102167

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100911

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101687

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101564

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101413

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101402

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102175

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100401

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100295

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101676

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101331

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

python313-litellm-1.101.0-1.1 on GA media (moderate)

python313-litellm-1.101.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11800-1 Rating: moderate Cross-References: CVE-2026-84377 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

EUVD-2026-80986

LiteLLM Proxy has server-side request forgery via the userconfig request parameter...

GHSA-HX8V-G79F-8W5F LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

Server-side Request Forgery (SSRF)

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the userconfig request parameter. An attacker can make the server initiate requests to arbitrary internal or external hosts by supplyin...

CVE-2026-59823

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place apibase inside the userconfig request body to bypass isrequestbodysafe, which blocks top-level apibase and baseurl but...

CVE-2026-59823 LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place apibase inside the userconfig request body to bypass isrequestbodysafe, which blocks top-level apibase and baseurl but...