{"type":"bundle","id":"bundle--098a05f2-2f9c-5904-88fc-fb61fc699b5a","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--3932c1a5-23d8-56c8-a238-37e8cd8eeeaf","created":"2026-10-27T20:53:45.057Z","modified":"2026-10-27T20:53:45.057Z","name":"LiteLLM Enterprise proxy leaks its master key to a request with no API key (GHSA-w4c7-34wj-hqm8)","description":"An unauthenticated request to any LLM route on a LiteLLM proxy running with an Enterprise license could make the proxy read a local file and send its contents to a URL chosen by the attacker. Reading the process environment exposes LITELLM_MASTER_KEY and provider API keys, which gives full admin on the proxy; in some configurations this leads to arbitrary Python execution as root. The root cause, per PR #48599, is that failure logs for rejected requests were built from the raw request body, so a caller with no valid key could set per-request logging parameters such as the Langfuse or LangSmith host and the GCS bucket and service-account path. Fixed in litellm 1.103.10, 1.104.8, 1.105.6 and 1.106.5, whose release notes describe the change only as a logging change with 'No action needed to upgrade'. Open source deployments without a license are not affected.","aliases":["GHSA-w4c7-34wj-hqm8","LiteLLM master key leak","LiteLLM Enterprise unauthenticated file read","litellm 1.106.5 security fix","LiteLLM failure log allowlist PR 48599"],"first_seen":"2026-10-27T19:39:00Z","last_seen":"2026-10-27T20:33:15Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"GHSA-w4c7-34wj-hqm8: Unauthenticated file read leaks master key on Enterprise proxy","url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-w4c7-34wj-hqm8"},{"source_name":"BerriAI/litellm PR #48599: build proxy-only failure logs from an allowlist","url":"https://github.com/BerriAI/litellm/pull/48599"},{"source_name":"LiteLLM v1.106.5 release","url":"https://github.com/BerriAI/litellm/releases/tag/v1.106.5"},{"source_name":"PyPI litellm release history","url":"https://pypi.org/project/litellm/"},{"source_name":"HOL Guard analysis: LiteLLM Enterprise proxy master key leak","url":"https://hol.org/blog/litellm-enterprise-proxy-unauthenticated-master-key-leak-ghsa-w4c7-34wj-hqm8"}]}]}