PyPI/litellm CVE-2026-35029: high 8.8, EPSS 38.61%
LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint
Action: Upgrade litellm to 1.83.0 or later.
pip install litellm==1.83.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.83.0 | - |
Fixed versions
| 1.83.0 |
Sources
- osv: PYSEC-2026-2597
- nvd: CVE-2026-35029
- https://github.com/BerriAI/litellm/security/advisories/GHSA-53mr-6c8q-9789
- https://github.com/BerriAI/litellm
- http://seclists.org/fulldisclosure/2026/Apr/17
- https://pypi.org/project/litellm
- https://github.com/advisories/GHSA-53mr-6c8q-9789
CVE-2026-35029 · published · modified · JSON