Check Point Says LiteLLM 1.77.7 Flaw Lets Any User Take Over Proxy
Summary
Check Point Research reports that LiteLLM gateway version 1.77.7 carries CVE-2026-35029 and CVE-2026-59823, fixed in 1.83.9. The researchers say a missing authorization check on /config/update let any authenticated user alter runtime configuration, enabling file read, admin takeover, and code execution. A separate SSRF flaw exposed provider API keys.
Key Points
- Check Point Research says setting UI_LOGO_PATH through /config/update makes the /get_image endpoint serve files such as /etc/passwd.
- Check Point Research finds that overwriting UI_USERNAME and UI_PASSWORD grants a low-privilege user full PROXY_ADMIN access.
- Pass-through endpoints execute Python modules downloaded from remote S3 storage addresses, Check Point Research reports.