medium4.9
CVE-2026-59819
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.
Impact
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's /health/test_connection endpoint resolved request-supplied environment and OIDC file references in litellm_params, allowing a proxy administrator or another privileged caller with permission to test model connections to read files from the local filesystem via an oidc/file/ reference. This issue is fixed in version 1.83.10-stable.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | litellm | < 1.83.10 | 1.83.10 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Litellm | Litellm | before 1.83.10 Version 1.83.10 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-4g5m-c9r5-49xf
- https://github.com/BerriAI/litellm/security/advisories/GHSA-4g5m-c9r5-49xf
- https://nvd.nist.gov/vuln/detail/CVE-2026-59819
- https://github.com/BerriAI/litellm/pull/25592
- https://github.com/BerriAI/litellm/releases/tag/v1.83.10-stable