LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place api_base inside the user_config request body to bypass is_request_body_safe, which blocks top-level api_base and base_url but previously did not inspect or reject user_config. Because user_config constructs the outbound router, the nested destination redirects a server-side request to an internal or external host selected by the caller and can expose endpoints the caller cannot otherwise access. This issue is fixed in version 1.83.9.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an
    authenticated LiteLLM Proxy caller with a valid virtual key can place api_base inside the user_config
    request body to bypass is_request_body_safe, which blocks top-level api_base and base_url but previously
    did not inspect or reject user_config. Because user_config constructs the outbound router, the nested
    destination redirects a server-side request to an internal or external host selected by the caller and can
    expose endpoints the caller cannot otherwise access. This issue is fixed in version 1.83.9.
    (CVE-2026-59823)

ID	Name	Product	Family	Type	Severity
461827	Echo: litellm: security update to 1.83.9	Tenable Cloud Security	Echo Local Security Checks	Local	medium
461827	Echo: litellm: security update to 1.83.9	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
448262	SCA: security update for litellm (GHSA-hx8v-g79f-8w5f)	Tenable Cloud Security	SCA Checks	Local	medium
448262	SCA: security update for litellm (GHSA-hx8v-g79f-8w5f)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-59823

medium

Tenable Plugins

medium

medium

medium

medium