LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image, and take over other privileged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables. Fixed in v1.83.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the
    /config/update endpoint does not enforce admin role authorization. A user who is already authenticated
    into the platform can then use this endpoint to modify proxy configuration and environment variables,
    register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving
    remote code execution, read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image,
    and take over other privileged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables.
    Fixed in v1.83.0. (CVE-2026-35029)

ID	Name	Product	Family	Type	Severity
465030	Echo: litellm: security update to 1.78.0+echo.1	Tenable Cloud Security	Echo Local Security Checks	Local	high
465030	Echo: litellm: security update to 1.78.0+echo.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
441292	SCA: security update for litellm (GHSA-53mr-6c8q-9789)	Tenable Cloud Security	SCA Checks	Local	high
441292	SCA: security update for litellm (GHSA-53mr-6c8q-9789)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-35029

high

Tenable Plugins

high

high

high

high