ZDI-CAN-27169
MEDIUM 6.5
Overdue
Jun 03, 2025
LiteLLM
LiteLLM is a popular open-source library that provides a unified interface for accessing various large language models and AI APIs. This vulnerability has a CVSS score of 6.5 and requires network access with low complexity and valid user credentials to exploit, resulting in integrity compromise but no data confidentiality or system availability loss. Security teams should monitor for potential unauthorized modifications or tampering with LiteLLM configurations or outputs from authenticated users until the October 1st patch deadline.
Advisory Details
Researcher
Discovered by:
Alfredo Oliveira of Trend Research
Reported
June 03, 2025
Deadline
October 01, 2025
197d overdue
CVSS Vector
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N