GitHub Advisoryadvisory · PyPI

GHSA-4g5m-c9r5-49xf LiteLLM: Local file read via request-supplied OIDC file references

LOW Published 2026-07-22 Modified 2026-07-22 Official page ↗
Aliases
CVE-2026-59819
Ecosystem
PyPI
Packages
litellm
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-73
Reviewed
2026-07-22

Affected packages

• PyPI litellm: < 1.83.10 → fixed in 1.83.10

Description

Impact LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references in `litellm_params`. A proxy administrator, or another privileged caller with permission to test model connections, could cause LiteLLM to read files from the local filesystem via an `oidc/file/` reference. Because exploitation requires privileged proxy access, this is treated as a defense-in-depth issue rather than a cross-tenant privilege bypass. Patches The issue is fixed in `1.83.10-stable`. LiteLLM recommend upgrading to `1.83.10-stable` or later. Workarounds Restrict `/health/test_connection` access to trusted administrators only.

Related

Alias · CVE (1)

  • CVE-2026-59819 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. vulnerability

Weakness · CWE (1)

  • CWE-73 External Control of File Name or Path weakness

References