Archive
Format: Security brief
-
REVIEW
LiteLLM key reuse could let internal users become proxy administrators
A LiteLLM proxy flaw crosses an authentication boundary. Check branch-specific fixes and login configuration.
-
REVIEW
LiteLLM file-read flaw could expose proxy secrets to low-privilege users
An authenticated low-privilege user could access proxy-readable files. The advisory identifies 1.95.0 as the fixed release.
-
REVIEW
MCP Python SDK redirects could leak custom headers and request bodies
HTTP-client redirect behaviour could expose custom credentials and request bodies. Check transport settings and upgrade affected SDK versions.