CVE-2026-84377

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.88.6 LiteLLM versions prior to 1.96.2

Description Authenticated proxy users can redirect outbound provider calls to a destination under their control, causing the proxy to leak configured provider credentials. This occurs because request validation in several files, including litellm/proxy/auth/auth utils.py and litellm/proxy/common request processing.py, uses incomplete checks that fail to inspect all sensitive parameters or equivalent values across nested request fields, path values, and bracket-notation form data. Consequently, routing and credential parameters such as api base, base url, model list, fallbacks, and litellm credential name can be applied without clearing the operator's stored key. This exposes upstream provider credentials and other configured secrets, while also enabling server-side requests to internal services reachable by the proxy. Real-world incidents of this issue being exploited have been reported.

Recommendations Update to version 1.88.6 or later. Update to version 1.96.2 or later.