https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:39:03.050055+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-59819 BREW-aider-CVE-2026-59819 — LiteLLM: Local file read via request-supplied OIDC file references 2026-10-03T11:39:03.054337+00:00

Affected: Homebrew: aider

### Impact

LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references in `litellm_params`. A proxy administrator, or another privileged caller with permission to test model connections, could cause LiteLLM to read files from the local filesystem via an `oidc/file/` reference.

Because exploitation requires privileged proxy access, this is treated as a defense-in-depth issue rather than a cross-tenant privilege bypass.

### Patches

The issue is fixed in `1.83.10-stable`.

LiteLLM recommend upgrading to `1.83.10-stable` or later.

### Workarounds

Restrict `/health/test_connection` access to trusted administrators only.

 https://cve.radiocsirt.org/vuln/euvd-2026-335338 EUVD-2026-335338 2026-10-03T11:39:03.054391+00:00 EUVD-2026-335338 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59819 fkie_cve-2026-59819 2026-10-03T11:39:03.054408+00:00

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's /health/test_connection endpoint resolved request-supplied environment and OIDC file references in litellm_params, allowing a proxy administrator or another privileged caller with permission to test model connections to read files from the local filesystem via an oidc/file/ reference. This issue is fixed in version 1.83.10-stable.

 https://cve.radiocsirt.org/vuln/ghsa-4g5m-c9r5-49xf GHSA-4g5m-c9r5-49xf — LiteLLM: Local file read via request-supplied OIDC file references 2026-10-03T11:39:03.054432+00:00

Affected: PyPI: litellm

### Impact

LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references in `litellm_params`. A proxy administrator, or another privileged caller with permission to test model connections, could cause LiteLLM to read files from the local filesystem via an `oidc/file/` reference.

Because exploitation requires privileged proxy access, this is treated as a defense-in-depth issue rather than a cross-tenant privilege bypass.

### Patches

The issue is fixed in `1.83.10-stable`.

LiteLLM recommend upgrading to `1.83.10-stable` or later.

### Workarounds

Restrict `/health/test_connection` access to trusted administrators only.

 https://cve.radiocsirt.org/vuln/pysec-2026-3476 PYSEC-2026-3476 — LiteLLM: Local file read via request-supplied OIDC file references 2026-10-03T11:39:03.054459+00:00

Affected: PyPI: litellm

### Impact

LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references in `litellm_params`. A proxy administrator, or another privileged caller with permission to test model connections, could cause LiteLLM to read files from the local filesystem via an `oidc/file/` reference.

Because exploitation requires privileged proxy access, this is treated as a defense-in-depth issue rather than a cross-tenant privilege bypass.

### Patches

The issue is fixed in `1.83.10-stable`.

LiteLLM recommend upgrading to `1.83.10-stable` or later.

### Workarounds

Restrict `/health/test_connection` access to trusted administrators only.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2263 WID-SEC-W-2026-2263 — LiteLLM: Mehrere Schwachstellen 2026-10-03T11:39:03.054484+00:00

Ein Angreifer kann mehrere Schwachstellen in LiteLLM ausnutzen, um Informationen offenzulegen, Daten zu manipulieren, Code auszuführen und um Sicherheitsmaßnahmen zu umgehen.