GHSA-4g5m-c9r5-49xf: LiteLLM: Local file read via request-supplied OIDC file references

lowCVE-2026-59819

Impact LiteLLM's /health/test_connection endpoint resolved request-supplied environment and OIDC file references in litellm_params. A proxy administrator, or another privileged caller with permission to test model connections, could cause LiteLLM to read files from the local filesystem via an oidc/file/ reference. Because exploitation requires privileged proxy access, this is treated as a defense-in-depth issue rather than a cross-tenant privilege bypass. Patches The issue is fixed in 1.83.10-stable. LiteLLM recommend upgrading to 1.83.10-stable or later. Workarounds Restrict /health/test_connection access to trusted administrators only.

Details

Source: GitHub Security Advisories (INTL · database · site)
Severity: low
Published: 2026-07-22
Last updated: 2026-07-22
Exploitation: Not in CISA KEV at last sync

Original advisory: https://github.com/advisories/GHSA-4g5m-c9r5-49xf

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-598190.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-59819	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

GHSA-4g5m-c9r5-49xf: LiteLLM: Local file read via request-supplied OIDC file references

Details

Exploitation outlook

Referenced CVEs

Same CVEs, other sources

More from GitHub Security Advisories