SEC Consult SA-20260421-0 :: Broken Access Control in Config Endpoint in LiteLLM

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-04-29 17:43 UTC
Importiert: 2026-05-17 21:16 UTC
Quelle-ID: full_disc
uid_hash: a1413cb03c0f80786848215fa30fe481a029a2da10e7e2be21fed979db2dae3c

Full Disclosure

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 29 SEC Consult Vulnerability Lab Security Advisory < 20260421-0 >

=======================================================================

           title: Broken Access Control in Config Endpoint

         product: LiteLLM

vulnerable version: <=v1.83.0

fixed version: v1.83.0-nightly

CVE number: CVE-2026-35029

impact: high

        homepage:https://www.litellm.ai/

...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-35029			HIGH	8.7			2026-04-06

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss