litellm vulnerabilities (PyPI)
44 vulnerabilities.
-
litellmPyPI LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials` 8.1 High -
litellmPyPI LiteLLM vulnerable to reflected XSS in /sso/debug/callback 6.8 Medium -
litellmPyPI LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key 9.9 Critical -
litellmPyPI LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy 5.3 Medium -
litellmPyPI LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters 6.5 Medium -
litellmPyPI LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint 9.8 Critical -
litellmPyPI LiteLLM: Local file read via request-supplied OIDC file references 2.1 Low -
litellmPyPI LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback 8.8 High -
litellmPyPI LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 6.1 Medium -
litellmPyPI LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks 2.1 Low -
litellmPyPI BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization 5.3 Medium -
litellmPyPI BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery 5.3 Medium -
litellmPyPI BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization 5.3 Medium -
litellmPyPI BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration 5.3 Medium -
litellmPyPI BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication 6.9 Medium -
litellmPyPI BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication 6.9 Medium -
litellmPyPI BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration 5.3 Medium -
litellmPyPI BerriAI litellm M2M JWT user_api_key_auth.py improper authorization 2.3 Low -
litellmPyPI BerriAI litellm Admin Key key_management_endpoints.py improper authorization 5.3 Medium -
litellmPyPI LiteLLM: Authentication Bypass via Host Header Injection 9.5 Critical -
litellmPyPI LiteLLM < 1.83.10 Privilege Escalation via User Update 8.7 High -
litellmPyPI LiteLLM < 1.83.14 Privilege Escalation via API Key Generation 8.7 High -
litellmPyPI LiteLLM: Authenticated command execution via MCP stdio test endpoints 8.7 High -
litellmPyPI LiteLLM: SQL injection in Proxy API key verification 9.3 Critical -
litellmPyPI LiteLLM: Server-Side Template Injection in /prompts/test endpoint 8.6 High -
litellmPyPI Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail 8.8 High -
litellmPyPI LiteLLM: Password hash exposure and pass-the-hash authentication bypass 8.6 High -
litellmPyPI LiteLLM has an authentication bypass via OIDC userinfo cache key collision 9.4 Critical -
litellmPyPI LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint 8.7 High -
litellmPyPI Two LiteLLM versions published containing credential harvesting malware No score -
litellmPyPI Remote Code Execution in BerriAI/litellm 8.8 High -
litellmPyPI Denial of Service in BerriAI/litellm 7.5 High -
litellmPyPI Improper Authorization in BerriAI/litellm 8.1 High -
litellmPyPI Exposure of Sensitive Information in berriai/litellm 7.5 High -
litellmPyPI Improper Output Neutralization for Logs in berriai/litellm 7.5 High -
litellmPyPI Denial of Service (DoS) in berriai/litellm 7.5 High -
litellmPyPI SSRF in berriai/litellm 7.5 High -
litellmPyPI Improper Access Control in Team Management in berriai/litellm 5.3 Medium -
litellmPyPI Remote Code Execution in BerriAI/litellm 9.8 Critical -
litellmPyPI Arbitrary File Deletion in BerriAI/litellm 6.5 Medium -
litellmPyPI Blind SQL Injection in berriai/litellm 4.9 Medium -
litellmPyPI SQL Injection in berriai/litellm 6.4 Medium -
litellmPyPI Remote Code Execution in berriai/litellm 9.8 Critical -
litellmPyPI Server-Side Template Injection in BerriAI/litellm 9.8 Critical