Topic

Litellm Vulnerability

Coverage tagged litellm vulnerability.

Articles: 1
Desk: 1

Data graphic: LiteLLM salt-key flaw GHSA-7hp6-4w63-5g45, rated CVSS 3.1 9.9 Critical, shown as an attack path: an internal user submits crafted key metadata, the single salt key seals forged admin credentials, the bearer token is accepted, and the attacker gets proxy admin and command execution. First fixed on the 1.91 to 1.100 line in 1.100.4.

highAI Security Litellm Vulnerability

LiteLLM Salt-Key Flaw Lets Any Internal User Forge a Proxy Admin Token and Run Commands

A 9.9-rated GitHub advisory says LiteLLM's reused salt key lets an internal user become proxy admin and run commands. Two CVEs and another advisory landed too.

Oct 2 · 5 min