Technology
LiteLLM
-
REVIEW
LiteLLM nested user_config parameter could bypass outbound destination checks
CVE-2026-59823 required a valid virtual key and was fixed in version 1.83.9.
-
REVIEW
LiteLLM routing overrides could send stored provider credentials to another destination
CVE-2026-84377 affected authenticated requests and has separate fixed releases across several supported branches.
-
REVIEW
Researchers reported a large credential archive following the LiteLLM supply-chain attack
Hudson Rock’s archive analysis is a follow-up to the package incident, with domain counts distinct from confirmed infrastructure breaches.
-
REVIEW
LiteLLM guardrail creation paths lacked the checks applied in testing
CVE-2026-59821 concerned custom Python guardrails and administrative access, with additional risk when no master key was configured.
-
REVIEW
LiteLLM Host-header authentication bypass depended on upstream request handling
CVE-2026-49468 affected certain proxy deployments; the advisory says LiteLLM Cloud was not affected.
-
REVIEW
LiteLLM flaw chain linked low-privilege keys to administration and code execution
The reported chain combined three separate authorization and execution weaknesses, rather than one generic Claude vulnerability.
-
REVIEW
LiteLLM configuration endpoint lacked an administrator-role check
CVE-2026-35029 could let an authenticated user change privileged proxy configuration; version 1.83.0 added the required check.
-
REVIEW
Malicious LiteLLM releases turned an AI gateway dependency into a credential-theft risk
TrendAI’s analysis identifies trojanized package versions 1.82.7 and 1.82.8 in the March 2026 supply-chain incident.
-
REVIEW
Historical advisory: LiteLLM callback configuration could execute commands
CVE-2024-6825 concerns a code-capable callback configuration path, not a product named “Remote Code Execution”.
-
REVIEW
LiteLLM key reuse could let internal users become proxy administrators
A LiteLLM proxy flaw crosses an authentication boundary. Check branch-specific fixes and login configuration.
-
REVIEW
LiteLLM file-read flaw could expose proxy secrets to low-privilege users
An authenticated low-privilege user could access proxy-readable files. The advisory identifies 1.95.0 as the fixed release.