Path Traversal

LiteLLM is vulnerable to Path Traversal. The vulnerability is due to the /health/testconnection endpoint resolving request-supplied environment and OIDC file references in litellmparams, which allows an attacker with sufficient privileges to read arbitrary files from the local filesystem by...

PT-2026-64086

Impact LiteLLM's /health/test connection endpoint resolved request-supplied environment and OIDC file references in litellm params. A proxy administrator, or another privileged caller with permission to test model connections, could cause LiteLLM to read files from the local filesystem via an...