CloudMap 漏洞情报库

中危2026/06/25

LiteLLM Proxy - Model Exposure

LiteLLM proxy was detected with anonymous access to the model listing API. LiteLLM proxies that ship without `general_settings.master_key` (or with the key disabled) expose the configured upstream model catalog via /v1/models and /model/info — revealing which OpenAI / Anthropic / Azure / Bedrock / local-LLM endpoints are wired in, often along with their litellm_params routing config, and frequently leaving /chat/completions and /embeddings reachable without any bearer token.

litellmPoC 已收录

CVSS—

高危CVE-2026-350292026/06/25

LiteLLM - Arbitrary File Read

LiteLLM < 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts.

litellmPoC 已收录

CVSS—

严重CVE-2026-422082026/06/25

LiteLLM - SQL Injection

LiteLLM 1.81.16 to < 1.83.7 contains a SQL injection caused by improper handling of caller-supplied key in database query during proxy API key checks, letting unauthenticated attackers read and modify database data, exploit requires crafted Authorization header.

litellmPoC 已收录

CVSS—

严重CVE-2026-422712026/06/25

LiteLLM - Command Injection

A critical unauthenticated remote code execution vulnerability exists in LiteLLM due to improper input handling in the MCP stdio test endpoint. An attacker can send a specially crafted request to the `/mcp-rest/test/connection` endpoint with controlled parameters, resulting in arbitrary command execution on the server. When combined with an authentication bypass technique—such as the Starlette BadHost flaw (CVE-2026-48710)—an unauthenticated attacker can exploit the chain to execute commands as the server process. Exploitation allows an attacker to spawn processes with the privileges of the LiteLLM server, potentially leading to complete compromise of the host.

litellmPoC 已收录EXP 已收录

CVSS—

高危CVE-2024-65872024/09/13

LiteLLM - Server-Side Request Forgery

LiteLLM vulnerable to Server-Side Request Forgery (SSRF) vulnerability Exposes OpenAI API Keys.

litellmPoC 已收录

CVSS7.5EPSS 58.9%

litellm

关联漏洞

LiteLLM Proxy - Model Exposure

LiteLLM - Arbitrary File Read

LiteLLM - SQL Injection

LiteLLM - Command Injection

LiteLLM - Server-Side Request Forgery