LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
Summary
A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the
proxy's outbound request to a host of their choosing by smuggling an api_base inside the
user_config request body, bypassing the existing parameter guard.
Details
LiteLLM Proxy validates request bodies with is_request_body_safe, which blocks the
api_base and base_url parameters but does not cover user_config. The user_config
object is used to build the outbound router for a request, so a caller can place an
api_base inside it and reach an arbitrary host. The guard only inspected the two
top-level keys, so the same api_base nested inside user_config was never checked.
Exploitation requires a valid virtual key.
Impact
An authenticated caller can make the proxy issue server-side requests to internal or external hosts of their choosing, reaching endpoints the caller cannot otherwise access.
Affected / Patched
Affected: <= 1.83.8
Patched: 1.83.9
Remediation
Upgrade to 1.83.9 or later (released 2026-04-17).
Software afectado
Haz clic en una tecnología para ver todas sus vulnerabilidades.
| Plataforma | Paquete | Versiones vulnerables | Corregida en |
|---|---|---|---|
| Python (PyPI) | litellm | < 1.83.9 | 1.83.9 |
Referencias
- https://github.com/BerriAI/litellm/security/advisories/GHSA-hx8v-g79f-8w5f
- https://nvd.nist.gov/vuln/detail/CVE-2026-59823
- https://github.com/BerriAI/litellm/pull/25827
- https://github.com/BerriAI/litellm/commit/47214be317f45a2d2ac08258362e0481411eb427
- https://github.com/BerriAI/litellm
- https://pypi.org/project/litellm
- https://github.com/advisories/GHSA-hx8v-g79f-8w5f
- Vector CVSS
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N- Debilidad (CWE)
CWE-918- Plataforma
- Python (PyPI)
- Paquete
litellm- Publicada
- 17.09.2026
- Actualizado
- 11.10.2026 15:18
Fuentes y licencias
OSV / GitHub Advisory Database - PYSEC-2026-4070 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-hx8v-g79f-8w5f - CC BY 4.0
Historial de vulnerabilidades: litellm
Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.
- Entradas en total
- 42
- Primera → última
- 04.2024 09.2026
- Sin corrección
- 14
- Explotada en ataques
- 3
Distribución por gravedad
- Crítica 7
- Alta 17
- Media 8
- Baja 9
- Sin evaluar 1
Divulgaciones por año
- 2024: 8
- 2025: 6
- 2026: 28
-
LiteLLM Proxy has server-side request forgery via the `user_config` request parameter esta entrada
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.