https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 02:17:03 +0000 https://vulnerability.circl.lu/vuln/ghsa-53mr-6c8q-9789 <p><strong>Affected:</strong> PyPI: litellm</p> <p>### Impact</p> <p>The `/config/update endpoint` does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to do the following:</p> <p>- Modify proxy configuration and environment variables - Register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution - Read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image - Take over other priveleged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables</p> <p>### Patches</p> <p>Fixed in v1.83.0. The endpoint now requires `proxy_admin` role.</p> <p>### Workarounds</p> <p>Restrict API key distribution. There is no configuration-level workaround.</p> <p><strong>Affected:</strong> PyPI: litellm</p> <p>### Impact</p> <p>The `/config/update endpoint` does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to do the following:</p> <p>- Modify proxy configuration and environment variables - Register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution - Read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image - Take over other priveleged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables</p> <p>### Patches</p> <p>Fixed in v1.83.0. The endpoint now requires `proxy_admin` role.</p> <p>### Workarounds</p> <p>Restrict API key distribution. There is no configuration-level workaround.</p> https://vulnerability.circl.lu/vuln/ghsa-53mr-6c8q-9789