CVE-2026-84377: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.
Summary
LiteLLM is a proxy server (a middleman program that forwards requests) that lets users call AI language model APIs using OpenAI's format. Before versions 1.88.6 and 1.96.2, authenticated users could trick the proxy into sending secret credentials (like API keys) to a destination they control by exploiting incomplete validation (security checks) in the request processing code.
Solution / Mitigation
Update LiteLLM to version 1.88.6 or 1.96.2, which fixed the incomplete request validation checks in the proxy code.
Vulnerability Details
6.5(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
network
low
low
none
September 2, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-84377
First tracked: September 2, 2026 at 08:07 PM
Classified by LLM (prompt v3) · confidence: 92%