{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/litellm--1.104.0rc1--1.104.0rc2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-114612"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LiteLLM (\u003c 1.95.0)","LiteLLM (\u003e= 1.91.0, \u003c 1.100.4)","LiteLLM (\u003e= 1.101.0, \u003c 1.101.3)","LiteLLM (\u003e= 1.102.0, \u003c 1.102.2)","LiteLLM (\u003e= 1.103.0, \u003c 1.103.1)","LiteLLM (\u003e= 1.104.0rc1, \u003c 1.104.0rc2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["LiteLLM"],"content_html":"\u003cp\u003eLiteLLM contains a vulnerability where the \u003ccode\u003e/utils/transform_request\u003c/code\u003e endpoint fails to properly sanitize the \u003ccode\u003evertex_ai_credentials\u003c/code\u003e parameter. While \u003ccode\u003evertex_credentials\u003c/code\u003e was explicitly blocked in the request-body safety checks, the alias \u003ccode\u003evertex_ai_credentials\u003c/code\u003e was omitted. An authenticated user with the \u003ccode\u003einternal_user_viewer\u003c/code\u003e role can supply a local file path to this parameter, causing the application to read the file and potentially transmit its contents to an attacker-controlled destination.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker can read any file accessible by the system user running the LiteLLM process. Sensitive files such as \u003ccode\u003e/proc/self/environ\u003c/code\u003e may contain environment variables, including \u003ccode\u003eLITELLM_MASTER_KEY\u003c/code\u003e and various provider API keys, leading to full administrative compromise of the proxy instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpgrade the LiteLLM package to version 1.95.0 or later immediately. The updated version includes \u003ccode\u003evertex_ai_credentials\u003c/code\u003e in the request-body blocklist, mitigating the vulnerability. No configuration workarounds are available for versions prior to 1.95.0.\u003c/p\u003e\n","date_modified":"2026-10-29T19:52:02Z","date_published":"2026-10-29T19:49:34Z","id":"https://feed.craftedsignal.io/briefs/2026-10-litellm-file-read/","summary":"An authenticated user with the internal_user_viewer role can read arbitrary local files from the LiteLLM proxy runtime by exploiting an incomplete blocklist in the vertex_ai_credentials parameter.","title":"LiteLLM: Local file read vulnerability in vertex_ai_credentials","url":"https://feed.craftedsignal.io/briefs/2026-10-litellm-file-read/"}],"language":"en","title":"CraftedSignal Threat Feed - LiteLLM (\u003e= 1.104.0rc1, \u003c 1.104.0rc2)","version":"https://jsonfeed.org/version/1.1"}