AIKIDO-2025-10010
litellm is vulnerable to Information Disclosure
30
Severity Score
Low Risk
Information Disclosure
This Affects:
TL;DR
Affected versions of this package are affected by Information Disclosure due to an insecure log configuration that could expose langfuse keys and other sensitive information in the application logs. An attacker could exploit this misconfiguration to gather critical information from the application.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
1.55.3 - 1.56.8
Fixed in 1.56.9Background info
litellm is vulnerable to Information Disclosure in versions 1.55.3 - 1.56.8.
How to fix this
Upgrade the litellm library to the patch version.
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.