Threats Tagged 'brew-rawdog-cve-2026-59823'

CVE-2026-59823 is a Server-Side Request Forgery (SSRF) vulnerability in BerriAI's LiteLLM proxy server versions prior to 1.83.9. An authenticated user with a valid virtual key could exploit this flaw by placing an api_base parameter inside the user_config request body, bypassing existing safety checks. This allows the attacker to redirect server-side requests to internal or external hosts not normally accessible, potentially exposing sensitive endpoints. The issue is resolved in version 1.83.9.