PT-2026-30278 · Litellm · Litellm

Highjaydns · CVE-2026-35029 · Published 2026-04-03 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.0

Description LiteLLM is a proxy server for LLM APIs. The /config/update API endpoint did not enforce admin role authorization, allowing authenticated users to modify proxy configurations and environment variables. This could lead to remote code execution by registering custom pass-through endpoint handlers pointing to attacker-controlled Python code, reading arbitrary server files via the /get image endpoint by manipulating the UI LOGO PATH variable, and taking over privileged accounts by overwriting the UI USERNAME and UI PASSWORD environment variables. The endpoint now requires the proxy admin role.

Recommendations Update to version 1.83.0 or later.

Exploit

Fix

RCE

Incorrect Authorization

Weakness Enumeration

CWE-863

CWE-425

Related Identifiers

CVE-2026-35029

ECHO-F909-9693-1F3F

GHSA-53MR-6C8Q-9789

PYSEC-2026-2597

Affected Products

Litellm

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35029.json · Exploit
• https://github.com/BerriAI/litellm/security/advisories/GHSA-53mr-6c8q-9789 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2597 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:13545 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-53mr-6c8q-9789 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:28960 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-35029 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:30056 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35029 · Security Note
• https://github.com/BerriAI/litellm · Note
• https://pypi.org/project/litellm · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2455474 · Note
• https://twitter.com/SelvaKtm2/status/2050048910316773706 · Twitter Post
• https://twitter.com/cybrsecpath/status/2049895239717126367 · Twitter Post
• https://twitter.com/CVEnew/status/2041223971308183960 · Twitter Post