REDHAT-BUG-2455474: High severity LiteLLM LiteLLM vulnerability
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, he /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UILOGOPATH and fetching via /getimage, and take over other privileged accounts by overwriting UIUSERNAME and UIPASSWORD environment variables. Fixed in v1.83.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2455474?
The severity of REDHAT-BUG-2455474 is critical due to unauthorized access to the /config/update endpoint.
How do I fix REDHAT-BUG-2455474?
To fix REDHAT-BUG-2455474, update LiteLLM to version 1.83.0 or later.
What versions of LiteLLM are affected by REDHAT-BUG-2455474?
LiteLLM versions prior to 1.83.0 are affected by REDHAT-BUG-2455474.
What type of vulnerability is REDHAT-BUG-2455474?
REDHAT-BUG-2455474 is a security vulnerability related to improper authorization.
Can an authenticated user exploit REDHAT-BUG-2455474?
Yes, an authenticated user can exploit REDHAT-BUG-2455474 to modify proxy configurations.