Aller au contenu
en Se connecter
8.6 Élevée

CVE-2026-42203 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format

Description

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user could reach it. Depending on how the proxy is deployed, this could expose secrets in the process environment (such as provider API keys or database credentials) and allow commands to be run on the host. This issue has been patched in version 1.83.7.

Produits et versions touchés

Produit Versions touchées Corrigé en
litellm 1.80 1.80.5 → < 1.83.7 1.83.7
Red Hat Ansible Automation Platform 2 Versions non publiées
Exploit Intelligence Versions non publiées
Red Hat OpenShift AI (RHOAI) Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de litellm

Les 40 CVE de litellm →
CVE-2026-114612 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format 9.9 Critique CVE-2026-108575 A vulnerability has been found in BerriAI LiteLLM up to 1.94.0 5.3 Moyenne CVE-2026-108574 A flaw has been found in BerriAI LiteLLM up to 1.95.0 5.3 Moyenne CVE-2026-93355 LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured… 7.6 Élevée
Suivre cette CVE