LiteLLM versions prior to 1.95.0 contain a vulnerability allowing an authenticated user with internal_user_viewer privileges to read arbitrary local files via a crafted vertex_ai_credentials value. This occurs because the request-body safety blocklist missed the alias vertex_ai_credentials, enabling file read access that can disclose sensitive environment variables and escalate privileges. The issue is fixed in version 1.95.0.