{"id":"ghsa-ghsa-7hp6-4w63-5g45","seq":1708814,"kind":"advisory","title":"LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key","url":"https://github.com/advisories/GHSA-7hp6-4w63-5g45","permalink":"https://vulnpulse.app/items/ghsa-ghsa-7hp6-4w63-5g45","summary":"影響: pip:litellm >= 1.91.0, < 1.100.4 → 1.100.4, pip:litellm >= 1.101.0, < 1.101.3 → 1.101.3, pip:litellm >= 1.102.0, < 1.102.2 → 1.102.2, pip:litellm >= 1.103.0, < 1.103.1 → 1.103.1, pip:litellm >= 1.104.0rc1, < 1.104.0rc2 → 1.104.0rc2\nAn authenticated user with internal_user privileges can escalate to proxy_admin and achieve remote code execution. The proxy uses one encryption key for two purposes: sealing secrets at rest and minting session tokens. An attacker exploits this by requesting a new API key with a crafted metadata field containing a forged admin credential as the \"secret\" value. The proxy encrypts and returns this payload. When this value is then presented as a bearer token, the proxy decrypts it, trusts the forg…","severity":"high","techs":["python"],"cves":["CVE-2026-114612"],"tags":["GHSA-7hp6-4w63-5g45","litellm","litellm","litellm","litellm","litellm"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T15:04:14.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}