Broken Access Control in Config Endpoint in LiteLLM

An incomplete authorization check in LiteLLM allowed low privileged attackers to access sensitive data on the host system.

CVE-2026-35029

 

Read the full advisory here (s'ouvre dans un nouvel onglet)