ZDI-CAN-26839 MEDIUM 5.7 Overdue Apr 10, 2025

LiteLLM

LiteLLM is an open-source library that provides a unified interface for large language models and AI services. The vulnerability requires network access and user authentication to exploit, but does not require special conditions to trigger; it could allow an authenticated attacker to view sensitive information through a phishing-style attack (indicated by the UI requirement). Security teams should monitor for this issue and plan patching within the vendor's deadline of August 8, 2025, particularly for environments where LiteLLM handles sensitive data or integrates with critical applications.

Advisory Details
Researcher Discovered by: Alfredo Oliveira and David Fiser of Trend Research
Reported April 10, 2025
Deadline August 08, 2025 251d overdue
CVSS Vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy