LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`

影響: pip:litellm < 1.95.0 → 1.95.0

An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertex_ai_credentials value to /utils/transform_request. The request-body safety blocklist rejected vertex_credentials but missed its alias vertex_ai_credentials, which let the value reach the Vertex AI credential loader and trigger a file read that is sent to an attacker-controlled URL. Impact A low-privilege authenticated user (only internal_user_viewer, obtainable through SSO logi…

GitHub Advisory Databaseで読む

2026/10/28 00:32、GitHub Advisory Databaseが「LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: Python。