ZDI-CAN-27169 MEDIUM 6.5 Overdue Jun 03, 2025

LiteLLM

LiteLLM is a popular open-source library that provides a unified interface for accessing various large language models and AI APIs. This vulnerability has a CVSS score of 6.5 and requires network access with low complexity and valid user credentials to exploit, resulting in integrity compromise but no data confidentiality or system availability loss. Security teams should monitor for potential unauthorized modifications or tampering with LiteLLM configurations or outputs from authenticated users until the October 1st patch deadline.

Advisory Details
Researcher Discovered by: Alfredo Oliveira of Trend Research
Reported June 03, 2025
Deadline October 01, 2025 197d overdue
CVSS Vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy