https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 04:39:01 +0000 https://vulnerability.circl.lu/sighting/76fcc9b2-2f45-4172-abea-068e161ca33f/export {"uuid": "76fcc9b2-2f45-4172-abea-068e161ca33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84377", "type": "seen", "source": "https://gist.github.com/alon710/dea2765728e20846c82f1cf257b88a79", "content": "# CVE-2026-84377: CVE-2026-84377: Server-Side Request Forgery and Provider Credential Exfiltration in LiteLLM Proxy\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-84377\n\n## Summary\nAn authenticated Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in LiteLLM proxy prior to versions 1.88.6 and 1.96.2. By bypassing sanitization logic through nested form-data parameters or using connection health checks, authenticated users can redirect outbound API calls to arbitrary endpoints, exposing sensitive upstream administrative credentials.\n\n## TL;DR\nAuthenticated users can trigger SSRF and force LiteLLM to forward administrative API keys and cloud secrets to attacker-controlled servers via parameter manipulation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS**: 6.5\n- **EPSS Score**: 0.0054 (0.54%)\n- **Impact**: Server-Side Request Forgery & Credential Exfiltration\n- **Exploit Status**: Proof of Concept available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- LiteLLM Proxy\n- **LiteLLM**: < 1.88.6 (Fixed in: `1.88.6`)\n- **LiteLLM**: >= 1.89.0, < 1.96.2 (Fixed in: `1.96.2`)\n\n## Mitigation\n\n- Upgrade LiteLLM to patched versions (1.88.6 for LTS, 1.96.2 for mainline)\n- Deploy egress filtering rules to restrict the proxy's network access to authorized provider domains\n- Configure provider_url_destination_allowed_hosts in litellm_settings to prevent arbitrary URL connections\n- Perform rotative credential updates for all upstream provider keys managed by the proxy\n\n**Remediation Steps:**\n1. Identify all deployed LiteLLM proxy containers or hosts\n2. Update the LiteLLM deployment manifest or configuration to point to version >= 1.96.2 or >= 1.88.6\n3. Apply the configuration change and restart the LiteLLM proxy instance\n4. Implement network egress blocklists to drop private network (RFC 1918) routing from the container\n5. Audit access logs for anomalous payloads containing bracket notation or external URL parameters\n\n## References\n\n- [GitHub Security Advisory GHSA-3cv6-jpf6-8222](https://github.com/BerriAI/litellm/security/advisories/GHSA-3cv6-jpf6-8222)\n- [NVD Vulnerability Detail - CVE-2026-84377](https://nvd.nist.gov/vuln/detail/CVE-2026-84377)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-84377) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T22:30:31.000000Z"} {"uuid": "76fcc9b2-2f45-4172-abea-068e161ca33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84377", "type": "seen", "source": "https://gist.github.com/alon710/dea2765728e20846c82f1cf257b88a79", "content": "# CVE-2026-84377: CVE-2026-84377: Server-Side Request Forgery and Provider Credential Exfiltration in LiteLLM Proxy\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-84377\n\n## Summary\nAn authenticated Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in LiteLLM proxy prior to versions 1.88.6 and 1.96.2. By bypassing sanitization logic through nested form-data parameters or using connection health checks, authenticated users can redirect outbound API calls to arbitrary endpoints, exposing sensitive upstream administrative credentials.\n\n## TL;DR\nAuthenticated users can trigger SSRF and force LiteLLM to forward administrative API keys and cloud secrets to attacker-controlled servers via parameter manipulation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS**: 6.5\n- **EPSS Score**: 0.0054 (0.54%)\n- **Impact**: Server-Side Request Forgery & Credential Exfiltration\n- **Exploit Status**: Proof of Concept available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- LiteLLM Proxy\n- **LiteLLM**: < 1.88.6 (Fixed in: `1.88.6`)\n- **LiteLLM**: >= 1.89.0, < 1.96.2 (Fixed in: `1.96.2`)\n\n## Mitigation\n\n- Upgrade LiteLLM to patched versions (1.88.6 for LTS, 1.96.2 for mainline)\n- Deploy egress filtering rules to restrict the proxy's network access to authorized provider domains\n- Configure provider_url_destination_allowed_hosts in litellm_settings to prevent arbitrary URL connections\n- Perform rotative credential updates for all upstream provider keys managed by the proxy\n\n**Remediation Steps:**\n1. Identify all deployed LiteLLM proxy containers or hosts\n2. Update the LiteLLM deployment manifest or configuration to point to version >= 1.96.2 or >= 1.88.6\n3. Apply the configuration change and restart the LiteLLM proxy instance\n4. Implement network egress blocklists to drop private network (RFC 1918) routing from the container\n5. Audit access logs for anomalous payloads containing bracket notation or external URL parameters\n\n## References\n\n- [GitHub Security Advisory GHSA-3cv6-jpf6-8222](https://github.com/BerriAI/litellm/security/advisories/GHSA-3cv6-jpf6-8222)\n- [NVD Vulnerability Detail - CVE-2026-84377](https://nvd.nist.gov/vuln/detail/CVE-2026-84377)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-84377) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T22:30:31.000000Z"} https://vulnerability.circl.lu/sighting/76fcc9b2-2f45-4172-abea-068e161ca33f/export Wed, 30 Sep 2026 22:30:31 +0000 https://vulnerability.circl.lu/sighting/fc01b0dd-8add-4e01-bbcd-6a705f99c3a4/export {"uuid": "fc01b0dd-8add-4e01-bbcd-6a705f99c3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq", "content": "CVE-2026-84377 - LiteLLM Credential Exposure and Server-Side Request Forgery Vulnerability\nCVE ID : CVE-2026-84377\n \n Published : 2. September 2026 18:21 | 54\u00a0Minuten ago\n \n Description : LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Pri...", "creation_timestamp": "2026-09-02T19:22:25.991597Z"} {"uuid": "fc01b0dd-8add-4e01-bbcd-6a705f99c3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq", "content": "CVE-2026-84377 - LiteLLM Credential Exposure and Server-Side Request Forgery Vulnerability\nCVE ID : CVE-2026-84377\n \n Published : 2. September 2026 18:21 | 54\u00a0Minuten ago\n \n Description : LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Pri...", "creation_timestamp": "2026-09-02T19:22:25.991597Z"} https://vulnerability.circl.lu/sighting/fc01b0dd-8add-4e01-bbcd-6a705f99c3a4/export Wed, 02 Sep 2026 19:22:25 +0000