LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
影響: pip:litellm < 1.95.0 → 1.95.0
An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertex_ai_credentials value to /utils/transform_request. The request-body safety blocklist rejected vertex_credentials but missed its alias vertex_ai_credentials, which let the value reach the Vertex AI credential loader and trigger a file read that is sent to an attacker-controlled URL. Impact A low-privilege authenticated user (only internal_user_viewer, obtainable through SSO logi…
| 정보원 | GitHub Advisory Database |
|---|---|
| 수집 시각 | 2026. 10. 28. 오전 06:03 |
| 데이터 | Markdown JSON |
2026. 10. 28. 오전 12:32, GitHub Advisory Database에서 "LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python.