Broken Access Control in Config Endpoint in LiteLLM

An incomplete authorization check in LiteLLM allowed low privileged attackers to access sensitive data on the host system.

CVE-2026-35029

 

Read the full advisory here (opens in a new tab)