Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.2 views

PYSEC-2026-2597 LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

Impact The /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to do the following: - Modify proxy configuration and environment variables - Register custom pass-through endpoint handlers pointing to...

8.7CVSS6.3AI score0.26409EPSS
SaveExploits2References6
Rows per page
Query Builder