repository icon
berriai / litellm Project repository

Python SDK, Proxy Server (LLM Gateway) to call 100+ LLM APIs in OpenAI format - [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthropic, Sagemaker, HuggingFace, Replicate, Groq]

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN7 DAYS

FIX

WITHINN/A DAYS

testing
wernerina
self closed
Unauthenticated SSRF and data exfiltration via user_config in /v1/chat/completio...
arozanov
pending
Missing Admin Role Check on Customer Block/Update Endpoints Allows Privilege Esc...
9to5ai
pending
LiteLLM: Privilege Escalation via /user/update
harmoc
pending
Public OAuth Routes Resolve Private MCP Servers and Use Stored Client Credential...
luoyecode
pending
Private MCP Server Credential Management Authorization Gap
luoyecode
pending
Authorization Bypass for all `/v1/mcp/*` and `/mcp-rest/*` routes — role checks...
flex0geek
pending
Server-Side Request Forgery via `file_url` parameter in `/v1/rag/ingest` endpoin...
flex0geek
pending
Server-Side Request Forgery via `user_config` parameter in `/v1/chat/completions...
flex0geek
pending
Authenticated SSRF via unvalidated file_url parameter in RAG ingest endpoint
luciusaskaner
duplicate
High
IDOR in /v2/key/info — any authenticated user reads other users key metadata inc...
hacnho
duplicate
Medium
SSRF via user-controlled api_base in /chat/completions — CVE-2024-6587 bypass/re...
hacnho
duplicate
High
Unauthenticated RCE via unsandboxed Jinja2 template rendering in /prompts/test e...
hacnho
duplicate
None
Using user access in /config/update to perform SSRF/environment manipulation
pigeondrops
duplicate
High
RCE with SSTI in /prompts/test endpoint
pigeondrops
pending
SSRF via unvalidated api_base parameter allows access to internal services and c...
radikhoroshev
duplicate
High
Server-Side Template Injection in /prompts/test leading to RCE (any authenticate...
radikhoroshev
pending
Sandbox Escape in Custom Code Guardrail via `len.__self__` Builtin Module Leak
sythenv
pending
CORS misconfiguration: wildcard origin with credentials allows cross-origin cred...
radikhoroshev
pending
Session cookie missing HttpOnly flag and JWT token has no expiry, exposing API k...
radikhoroshev
pending
litellm proxy: IDOR on /key/info allows any user to read metadata of other users...
radikhoroshev
duplicate
Medium
litellm proxy: Unauthenticated information disclosure via /health/readiness, /ro...
radikhoroshev
duplicate
Medium
SSRF in custom code guardrail HTTP primitives allows access to cloud metadata an...
dralexharrison
duplicate
Medium
Privilege escalation to PROXY_ADMIN via unrestricted allowed_routes in /key/gene...
dralexharrison
pending
IDOR in /spend/keys and /spend/users allows non-admin users to enumerate all API...
gengyscan
pending
Any API key holder executes arbitrary OS commands on LiteLLM proxy server, rea...
andresaifr
pending
Cross-tenant data access via IDOR in spend tracking and key management endpoints
nhomyk
pending
LiteLLM MCP auth bypass via OAuth2 passthrough and allow_all_keys allows unauthe...
jarcis-cy
pending
LiteLLM Jinja2 Server-Side Template Injection → RCE in /prompts/test Endpoint
phenggeler
duplicate
Critical
Remote Code Execution via Sandbox Escape in Custom Code Guardrails
mom3gool2030
pending
SSRF via Unrestricted HTTP Primitives in Custom Code Guardrails
mom3gool2030
pending
Server-Side Template Injection (SSTI) in `/prompts/test` Leads to Remote Code Ex...
yjk0805
pending
Sandbox Escape in Custom Code Guardrail via `len.__self__` Leads to Remote Code...
yjk0805
pending
Path traversal via crafted upload filename in /utils/dotprompt_json_converter —...
romain-deperne
pending
[Info Disclosure] Missing RBAC on Sensitive Admin Endpoints (/settings)
regaan
pending
[SSRF] Unvalidated HTTP Requests in Custom Code Guardrails
regaan
pending
[RCE] Sandbox Escape via Unicode Normalization Bypass in Custom Guardrails
regaan
pending
[Authentication Bypass] Pass-the-Hash via Inconsistent Key Hashing
regaan
pending
SSRF via path traversal in pass-through endpoint subpath allows access to intern...
narrator3333-hash
pending
SSRF in pass-through endpoints — unvalidated target URL in HTTP proxy requests
odysseypro25-project
pending
Code injection via skill import path in litellm_skills/main.py — unsanitized f-s...
odysseypro25-project
pending
Open Redirect in BYOK OAuth Flow Enables External API Key Theft
vnykmshr
pending
Zip Slip Path Traversal in Skills ZIP Extraction (extract_all_files)
rishavkumarthapa01-sketch
pending
Server-Side Template Injection (SSTI) to Remote Code Execution via unsandboxed J...
romain-deperne
duplicate
Critical
LiteLLM `/prompts/test` SSTI Vulnerability
la12138la
pending
SSRF via Custom Code Guardrail HTTP Primitives — No Internal IP Blocking
iamveene
pending
BYOK OAuth Open Redirect via Unvalidated redirect_uri
apeiria-zero
pending
CORS Misconfiguration — Wildcard Origin with Credentials in LiteLLM Proxy
apeiria-zero
pending
Jinja2 Server-Side Template Injection (SSTI) → Remote Code Execution in Prompt M...
apeiria-zero
duplicate
High
Server-Side Request Forgery (SSRF) via api_base Parameter in /chat/completions
apeiria-zero
self closed
Authentication Bypass in Pass-through Endpoints via Insecure Default Configurati...
apeiria-zero
pending
Custom Code Guardrail Sandbox Escape via exec() Leading to RCE + SSRF via Unprot...
iamveene
pending
LiteLLM: IDOR on /user/info -- Any Authenticated User Can View Any Other User Pr...
iamveene
pending
LiteLLM: JWT Tokens Signed with Reused Master Key -- Session Forgery and Key Lea...
iamveene
pending
LiteLLM: Arbitrary Code Execution via Custom Secret Manager Module Loading
iamveene
pending
LiteLLM: Unrestricted setattr() on litellm Module from YAML Config Allows Securi...
iamveene
pending
LiteLLM: Server-Side Template Injection via Unsandboxed Jinja2 in Prompt Manager
iamveene
duplicate
High
LiteLLM: Authentication Bypass via DB Unavailability Escalates to Proxy Admin
iamveene
pending
LiteLLM: Code Injection via f-string Interpolation in Sandbox Executor Requireme...
iamveene
pending
LiteLLM: Privilege Escalation via /user/update -- Any User Can Self-Elevate to P...
iamveene
pending
LiteLLM: Remote Code Execution via S3/GCS Remote Module Loading Without Integrit...
iamveene
pending
LiteLLM: Complete Authentication Bypass When LITELLM_MASTER_KEY Is Not Set
iamveene
not applicable
Remote Code Execution via exec() Sandbox Bypass in Custom Code Guardrail
apeiria-zero
pending
SSRF and Local File Read via Unauthenticated /get_image and /get_favicon Endpoin...
gorla666
duplicate
High
Unsafe deserialization via pickle in LiteLLM caching and serialization
etwithin
pending
Debug Endpoints `/debug/asyncio-tasks` and `/otel-spans` Accessible Without Auth...
hiyokosauna37
pending
Insufficient redirect_uri Validation in BYOK OAuth Flow Enables API Key Theft vi...
hiyokosauna37
pending
Server-Side Template Injection (SSTI) in Prompt Management System — RCE via Unsa...
wernerina
duplicate
Critical
Server-Side Template Injection in /prompts/test endpoint via unsandboxed Jinja2...
p0her
duplicate
High
Remote Code Execution via Privilege Escalation and Logic Bypass in Custom Guardr...
fatmo666
pending
SSRF via MCP spec_path parameter in /mcp-rest/test/tools/list endpoint
heejunb
self closed
Arbitrary File Read via MCP spec_path parameter in /mcp-rest/test/tools/list end...
heejunb
pending
Non-admin user can escalate to proxy_admin via unrestricted field modification i...
2201029-cyber
duplicate
Critical
Missing authorization in /v2/key/info allows any authenticated user to retrieve...
2201029-cyber
pending
SSRF in /v1/rag/ingest allows any authenticated user to access internal services...
2201029-cyber
duplicate
High
Unauthenticated Arbitrary File Read via /get_image Endpoint Using Attacker-Contr...
galanzi2580-wq
pending
IDOR in /v2/key/info Allows Any Authenticated User to Read Arbitrary API Key Met...
galanzi2580-wq
pending
Missing Authentication on Dynamic MCP Route Allows Unauthenticated Access to MCP...
galanzi2580-wq
pending
Arbitrary File Read and Secret Exfiltration via Dynamic Logging Callbacks in Lit...
mariuszmaik
pending
SQL Injection Authentication Bypass in LiteLLM Proxy via Authorization Header
mariuszmaik
pending
Budget Bypass via TOCTOU Race Condition in Spend Tracking in berriai/litellm
brianmcwilliams
pending
Code Injection in Sandbox Executor via Unsanitized Requirements String in berria...
brianmcwilliams
pending
SSRF via image_url in chat completions allows access to internal services and cl...
brianmcwilliams
pending
Remote Code Execution via NFKC Unicode Bypass of Custom Code Guardrail Sandbox
pavanchow
duplicate
Critical
Server-Side Template Injection (SSTI) via Unsandboxed Jinja2 in `/prompts/test`...
optimus-fulcria
duplicate
High
Production Custom Code Guardrail exec() Missing Sandbox Restrictions Present in...
wernerina
duplicate
Critical
Server-Side Request Forgery (SSRF) and Secret Exfiltration in Custom Code Guardr...
countless9515
pending
huntr: berriai/litellm