CVE-2026-59823: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated

LiteLLM is a proxy server (a middleman that forwards requests to AI language model services) that had a security flaw before version 1.83.9. An authenticated user could sneak an api_base parameter (which controls where requests are sent) inside a user_config section of their request to bypass safety checks, allowing them to redirect the server's requests to internal systems or external servers they shouldn't normally access.