Threats tagged 'ghsa-7hp6-4w63-5g45'

An authenticated user with internal_user privileges in LiteLLM can escalate to proxy_admin and execute arbitrary commands on the host. The vulnerability arises because the proxy uses the same encryption key for sealing secrets and minting session tokens, allowing an attacker to forge admin credentials via a crafted API key request. Versions >=1.91.0 and certain earlier versions with EXPERIMENTAL_UI_LOGIN=true are affected. Patches are available in versions 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0rc2. Mitigation includes upgrading to a fixed version or disabling EXPERIMENTAL_UI_LOGIN as a temporary workaround.