Security brief
LiteLLM configuration endpoint lacked an administrator-role check
REVIEWCVE-2026-35029 could let an authenticated user change privileged proxy configuration; version 1.83.0 added the required check.
What happened
The LiteLLM advisory describes missing administrator authorization on the proxy configuration-update endpoint. An authenticated user could change configuration and environment values that should have required a proxy administrator.
The documented consequences include file access, account takeover and code execution through configurable handlers. The prerequisite is an authenticated platform user, rather than an unrestricted claim that every proxy was remotely compromised.
The advisory lists 1.83.0 as fixed. Upgrade to a maintained release and review unexpected configuration changes. Limit who receives API access, while recognizing that reducing key distribution does not replace the missing role check.
Next step
Update LiteLLM and investigate unauthorized configuration or environment changes.
What we know
- Fixed version
- 1.83.0.
What remains unknown
- Open question
- The sources reviewed do not establish whether your deployment was exploited.
Source references
-
OSV
Technical details
- CVE
CVE-2026-35029