CVE-2026-123061 litellm: litellm: unauthenticated arbitrary file read leading to master key leakage and remote code execution
CriticalCVSS 9.8
- Published
- Updated
- Unknown
- Exploit status
- No public exploit known
Description
A critical vulnerability was discovered in LiteLLM Enterprise proxy where an unauthenticated remote attacker can trigger an arbitrary file read on any LLM route. This flaw allows an attacker to leak the proxy's master key (LITELLM_MASTER_KEY) and third-party model provider API credentials. With administrative proxy access obtained via the leaked master key, attackers can, in certain configurations, achieve remote code execution as root.
Affected products
No affected product data has been published yet.
References
- Red Hat CVE page mitigation vendor-advisory
- Red Hat Bugzilla 2564725 issue-tracking
- www.cve.org
- nvd.nist.gov
- github.com