LiteLLM Unrestricted Proxy Configuration Endpoint Vulnerability Allowing Privilege Escalation and Remote Code Execution

A vulnerability in LiteLLM versions prior to 1.83.0 allows authenticated users to bypass admin role authorization on the /config/update endpoint. This exploitation can lead to unauthorized modifications of proxy configurations and environment variables, registration of custom endpoint handlers that execute attacker-controlled Python code, remote code execution, unauthorized access to privileged accounts by overwriting specific environment variables, and unauthorized reading of server files through a crafted request.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, remote code execution, and unauthorized access to sensitive server files and accounts.

Remediation

Users can upgrade to LiteLLM version 1.83.0 or later, where the vulnerability has been patched by requiring admin role authorization on the affected endpoint.