All vulnerabilities

Servers and applications

GHSA-w4c7-34wj-hqm8

Unauthenticated file read leaks master key on Enterprise proxy

Severity
Critical 10.0
Published
27 Oct 2026
Last changed
27 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.103.10, 1.104.8, 1.105.6, 1.106.5
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
LiteLLMServers and applications · github:berriai/litellm
  • Every version before 1.103.10
  • Every version before 1.104.8
  • Every version before 1.105.6
  • Every version before 1.106.5

References