CVE-2026-59823

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.9

Description LiteLLM Proxy is susceptible to Server-Side Request Forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. An authenticated caller with a valid virtual key can bypass the is request body safe security check by placing the api base parameter inside the user config request body. While the system blocks top-level api base and base url parameters, it fails to inspect the user config object used to construct the outbound router. This allows the caller to redirect server-side requests to internal or external hosts, potentially exposing endpoints that should be inaccessible. Real-world incidents indicate this issue has been exploited in the wild.

Recommendations Update to version 1.83.9 or later.