786 matches found
LiteLLM: Admin Key Handler Has Improper Authorization
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/managementendpoints/keymanagementendpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated...
PYSEC-2026-4073 LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticateuser of the file litellm/proxy/auth/loginutils.py of the component PROXYADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated...
PYSEC-2026-4068 LiteLLM: Admin Key Handler Has Improper Authorization
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/managementendpoints/keymanagementendpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated...
PT-2026-105823
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/ experimental/mcp server/auth/user api key auth mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be...
PT-2026-105826
Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an api base inside the user config request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodie...
PT-2026-105827
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management endpoints/ui sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The...
PT-2026-105822
Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...
PT-2026-105828
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate user of the file litellm/proxy/auth/login utils.py of the component PROXY ADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be...
PT-2026-105825
A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load openapi spec async of the file litellm/proxy/ experimental/mcp server/openapi to mcp generator.py of the component MCP OpenAPI Spec Loader. This manipulation of the argument spec pa...
PT-2026-105824
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management endpoints/key management endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated...
PT-2026-105829
A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async pre call hook of the file enterprise/enterprise hooks/banned keywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The atta...
PT-2026-105831
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get redirect response from openid of the file litellm/proxy/management endpoints/ui sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be...
PT-2026-105830
A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/user api key auth.py of the component M2M JWT Handler. Such manipulation leads to improper authorization. The attack can be launched remotely. A high complexity level is...
EUVD-2026-70236
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters...
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...
GHSA-3CV6-JPF6-8222 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...
GHSA-HJ66-6F7G-4R5V vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, kserve-pmmlserver, openstack-keystone-2025.1-fips, ansible-operator, az, dask-kubernetes, kserve-lgbserver-fips, authentik, azureml-inference-server-http, dbt-bigquery, kserve-xgbserver, pgadmin4-fips, kubeflow-pipelines-fips,...
CVE-2026-49264 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, kserve-pmmlserver, openstack-keystone-2025.1-fips, ansible-operator, az, dask-kubernetes, kserve-lgbserver-fips, authentik, azureml-inference-server-http, dbt-bigquery, kserve-xgbserver, pgadmin4-fips, kubeflow-pipelines-fips,...
SUSE CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...