CVE-2026-59823

CVE Enrichment

CVSS: 5.3 MEDIUM
EPSS: 0.44%
EPSS Percentile: 38.04%
CISA KEV: Not listed

Description

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place api_base inside the user_config request body to bypass is_request_body_safe, which blocks top-level api_base and base_url but previously did not inspect or reject user_config. Because user_config constructs the outbound router, the nested destination redirects a server-side request to an internal or external host selected by the caller and can expose endpoints the caller cannot otherwise access. This issue is fixed in version 1.83.9.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 17-Sep-2026 02:17
Last Modified: 01-Oct-2026 00:43
EPSS Date: 2026-10-28
CWE: CWE-918

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:L /
                            UI:N /
                            VC:L /
                            VI:N /
                            VA:N /
                            SC:L /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

CNA Products / Version Status

BerriAI · litellm Source: CNA · [email protected]
Default status: unknown

< 1.83.9 — affected

References

Last enrichment sync: 05-Nov-2026 16:55
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. Check Point Details LiteLLM Flaws Enabling File Reads, Admin Takeover and Remote Code Execution

CVE (1)

Vendors (1)

Products (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.