CVE-2026-59819

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's /health/test_connection endpoint resolved request-supplied environment and OIDC file references in litellm_params, allowing a proxy administrator or another privileged caller with permission to test model connections to read files from the local filesystem via an oidc/file/ reference. This issue is fixed in version 1.83.10-stable.

• CWE-73

• https://github.com/BerriAI/litellm/pull/25592Issue Tracking, Patch
• https://github.com/BerriAI/litellm/releases/tag/v1.83.10-stableProduct, Release Notes
• https://github.com/BerriAI/litellm/security/advisories/GHSA-4g5m-c9r5-49xfMitigation, Patch, Vendor Advisory

Published

Jul 8, 2026

Last Modified

Jul 13, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5981A vulnerability has been found in D-Link DIR-605L 2.13B01. T…8.8
• CVE-2026-59814Joplin is an open source note-taking and to-do application t…7.6
• CVE-2026-59815Joplin is an open source note-taking and to-do application t…4.3
• CVE-2026-59816Joplin is an open source note-taking and to-do application t…4.3
• CVE-2026-59817Ghost is a Node.js content management system. From 6.27.0 be…5.3
• CVE-2026-59818etcd is a distributed key-value store for the data of a dist…8.1
• CVE-2026-5982A vulnerability was found in D-Link DIR-605L 2.13B01. This v…8.8
• CVE-2026-59820LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…6.5
• CVE-2026-59821LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…7.2
• CVE-2026-59822LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…8.2
• CVE-2026-59823LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…5.3
• CVE-2026-59825Mastodon is a free, open-source social network server based …7.4