repository icon
berriai / litellm Project repository

Python SDK, Proxy Server (LLM Gateway) to call 100+ LLM APIs in OpenAI format - [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthropic, Sagemaker, HuggingFace, Replicate, Groq]

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN14 DAYS

FIX

WITHINN/A DAYS

testing
wernerina
self closed
SSRF via user-controlled api_base in /chat/completions — CVE-2024-6587 bypass/re...
hacnho
duplicate
High
SSRF via Custom Code Guardrail HTTP Primitives — No Internal IP Blocking
iamveene
pending
BYOK OAuth Open Redirect via Unvalidated redirect_uri
apeiria-zero
pending
CORS Misconfiguration — Wildcard Origin with Credentials in LiteLLM Proxy
apeiria-zero
pending
Jinja2 Server-Side Template Injection (SSTI) → Remote Code Execution in Prompt M...
apeiria-zero
duplicate
High
Server-Side Request Forgery (SSRF) via api_base Parameter in /chat/completions
apeiria-zero
self closed
Authentication Bypass in Pass-through Endpoints via Insecure Default Configurati...
apeiria-zero
pending
Custom Code Guardrail Sandbox Escape via exec() Leading to RCE + SSRF via Unprot...
iamveene
pending
LiteLLM: IDOR on /user/info -- Any Authenticated User Can View Any Other User Pr...
iamveene
pending
LiteLLM: JWT Tokens Signed with Reused Master Key -- Session Forgery and Key Lea...
iamveene
pending
LiteLLM: Arbitrary Code Execution via Custom Secret Manager Module Loading
iamveene
pending
LiteLLM: Unrestricted setattr() on litellm Module from YAML Config Allows Securi...
iamveene
pending
LiteLLM: Server-Side Template Injection via Unsandboxed Jinja2 in Prompt Manager
iamveene
duplicate
High
LiteLLM: Authentication Bypass via DB Unavailability Escalates to Proxy Admin
iamveene
pending
LiteLLM: Code Injection via f-string Interpolation in Sandbox Executor Requireme...
iamveene
pending
LiteLLM: Privilege Escalation via /user/update -- Any User Can Self-Elevate to P...
iamveene
pending
LiteLLM: Remote Code Execution via S3/GCS Remote Module Loading Without Integrit...
iamveene
pending
LiteLLM: Complete Authentication Bypass When LITELLM_MASTER_KEY Is Not Set
iamveene
not applicable
Remote Code Execution via exec() Sandbox Bypass in Custom Code Guardrail
apeiria-zero
pending
SSRF and Local File Read via Unauthenticated /get_image and /get_favicon Endpoin...
gorla666
duplicate
High
Unsafe deserialization via pickle in LiteLLM caching and serialization
etwithin
pending
Debug Endpoints `/debug/asyncio-tasks` and `/otel-spans` Accessible Without Auth...
hiyokosauna37
pending
Insufficient redirect_uri Validation in BYOK OAuth Flow Enables API Key Theft vi...
hiyokosauna37
pending
Server-Side Template Injection (SSTI) in Prompt Management System — RCE via Unsa...
wernerina
duplicate
Critical
Server-Side Template Injection in /prompts/test endpoint via unsandboxed Jinja2...
p0her
duplicate
High
Remote Code Execution via Privilege Escalation and Logic Bypass in Custom Guardr...
fatmo666
pending
SSRF via MCP spec_path parameter in /mcp-rest/test/tools/list endpoint
heejunb
self closed
Arbitrary File Read via MCP spec_path parameter in /mcp-rest/test/tools/list end...
heejunb
pending
Non-admin user can escalate to proxy_admin via unrestricted field modification i...
2201029-cyber
duplicate
Critical
Missing authorization in /v2/key/info allows any authenticated user to retrieve...
2201029-cyber
pending
SSRF in /v1/rag/ingest allows any authenticated user to access internal services...
2201029-cyber
duplicate
High
Unauthenticated Arbitrary File Read via /get_image Endpoint Using Attacker-Contr...
galanzi2580-wq
pending
IDOR in /v2/key/info Allows Any Authenticated User to Read Arbitrary API Key Met...
galanzi2580-wq
pending
Missing Authentication on Dynamic MCP Route Allows Unauthenticated Access to MCP...
galanzi2580-wq
pending
Arbitrary File Read and Secret Exfiltration via Dynamic Logging Callbacks in Lit...
mariuszmaik
pending
SQL Injection Authentication Bypass in LiteLLM Proxy via Authorization Header
mariuszmaik
pending
Budget Bypass via TOCTOU Race Condition in Spend Tracking in berriai/litellm
brianmcwilliams
pending
Code Injection in Sandbox Executor via Unsanitized Requirements String in berria...
brianmcwilliams
pending
SSRF via image_url in chat completions allows access to internal services and cl...
brianmcwilliams
pending
Remote Code Execution via NFKC Unicode Bypass of Custom Code Guardrail Sandbox
pavanchow
duplicate
Critical
Server-Side Template Injection (SSTI) via Unsandboxed Jinja2 in `/prompts/test`...
optimus-fulcria
duplicate
High
Production Custom Code Guardrail exec() Missing Sandbox Restrictions Present in...
wernerina
duplicate
Critical
Server-Side Request Forgery (SSRF) and Secret Exfiltration in Custom Code Guardr...
countless9515
pending
Remote Code Execution via Custom Code Guardrail Sandbox Escape
13ph03nix
duplicate
Critical
Privilege Escalation from Internal User to Proxy Admin via Unrestricted allowed_...
13ph03nix
pending
Remote Code Execution via Custom Code Guardrail Sandbox Escape
seonghoj-bright
duplicate
Critical
Path Traversal in /guardrails/ui/category_yaml/{category_name} Allows Arbitrary...
drrose2029
pending
Path Traversal in `get_secret`
realnits
self closed
Server-Side Template Injection (SSTI) via Unsandboxed Jinja2 in /prompts/test En...
seory0
duplicate
High
Arbitrary File Deletion via Path Traversal in LiteLLM Proxy
locus-x64
informative
High
Remote Code Execution via Custom Code Guardrail Missing Sandbox
spacebrr
not applicable
extra_body Parameter Allows Arbitrary Override of Upstream Provider Request
responsiblereport10
pending
Server-Side Template Injection (SSTI) in /prompts/test Endpoint via Unsandboxed...
jhacksman
duplicate
High
Server-Side Template Injection (SSTI) leading to Remote Code Execution in /promp...
yashvardhantrip
duplicate
Critical