{"id":"ghsa-ghsa-g5ff-637f-6q2m","seq":1708800,"kind":"advisory","title":"LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`","url":"https://github.com/advisories/GHSA-g5ff-637f-6q2m","permalink":"https://vulnpulse.app/items/ghsa-ghsa-g5ff-637f-6q2m","summary":"影響: pip:litellm < 1.95.0 → 1.95.0\nAn authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertex_ai_credentials value to /utils/transform_request. The request-body safety blocklist rejected vertex_credentials but missed its alias vertex_ai_credentials, which let the value reach the Vertex AI credential loader and trigger a file read that is sent to an attacker-controlled URL. Impact A low-privilege authenticated user (only internal_user_viewer, obtainable through SSO logi…","severity":"high","techs":["python"],"cves":[],"tags":["GHSA-g5ff-637f-6q2m","litellm"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T15:32:36.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}