LiteLLM API_KEY Information Disclosure Vulnerability

A vulnerability in LiteLLM allows authenticated remote attackers to access sensitive information by exploiting the API_KEY parameter in the health endpoint. This flaw can lead to the unauthorized disclosure of stored credentials, potentially causing further compromise.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of sensitive information, specifically stored credentials, which could be used for further exploitation.

Remediation

LiteLLM has released a patch for this vulnerability in version 1.63.14-stable. Users should update to this version.