{"id":"CVE-2026-59819","title":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format","summary":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's /health/test_connection endpoint resolved request-supplied environment and OIDC file references in litellm_params, a…","severity":"medium","cvss":4.9,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-73"],"vendor":"litellm","product":"litellm","affected":["litellm < 1.83.10","litellm = 1.83.10"],"patched":["litellm 1.83.10"],"published":"2026-07-08","updated":"2026-07-13","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-59819","references":[{"url":"https://github.com/BerriAI/litellm/pull/25592","label":"security-advisories@github.com"},{"url":"https://github.com/BerriAI/litellm/releases/tag/v1.83.10-stable","label":"security-advisories@github.com"},{"url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-4g5m-c9r5-49xf","label":"security-advisories@github.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59819"},{"url":"https://github.com/BerriAI/litellm"}],"tags":["nvd","osv","pip"],"epss":0.00572,"epssPercentile":0.45803,"ingestedAt":"2026-07-13T13:27:18.175Z","aliases":["GHSA-4g5m-c9r5-49xf","PYSEC-2026-3476"],"ecosystem":"pip","slug":"CVE-2026-59819","body":"## Overview\n\nLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's /health/test_connection endpoint resolved request-supplied environment and OIDC file references in litellm_params, allowing a proxy administrator or another privileged caller with permission to test model connections to read files from the local filesystem via an oidc/file/ reference. This issue is fixed in version 1.83.10-stable.\n\n## Affected\n\n- `litellm < 1.83.10`\n- `litellm = 1.83.10`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `litellm 1.83.10`\n\n## Package advisory (CVE-2026-59819)\n\nAffected packages:\n\n- `litellm < 1.83.10`\n\nPatched in:\n\n- `litellm 1.83.10`\n\nSource: https://osv.dev/vulnerability/GHSA-4g5m-c9r5-49xf","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":27,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}