Threats tagged 'brew-rawdog-cve-2026-84377'

An authenticated user of the LiteLLM proxy can exploit insufficient request-body validation to redirect outbound provider calls to attacker-controlled destinations, causing the proxy to leak its configured provider credentials. The vulnerability arises because the proxy uses a denylist that misses some sensitive parameters and does not inspect nested parameters, allowing credential exfiltration and Server-Side Request Forgery (SSRF) against internal services. This issue affects specific versions prior to 0.1.6_26 and 0.1.6_29 and has been fixed in those versions.