LiteLLM vulnerable to reflected XSS in /sso/debug/callback

影響: pip:litellm >= 1.65.5, < 1.85.0 → 1.85.0

The /sso/debug/callback endpoint reflected identity-provider-controlled fields into an inline . An IdP-returned string field containing (for example a user-editable display name) closed the script block and executed attacker JavaScript in the proxy's origin. Impact Reflected XSS on the LiteLLM proxy origin. The route required no authentication, so an attacker with an account on the configured IdP whose claims pass such strings through verbatim could complete the SSO flow themselves and deliver…

在 GitHub Advisory Database 阅读

2026/10/28 00:31，GitHub Advisory Database 发布了“LiteLLM vulnerable to reflected XSS in /sso/debug/callback”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：Python。