AIKIDO-2025-10076

litellm is vulnerable to Authorization Bypass

40

Medium

litellm python

AIKIDO-2025-10076: litellm is vulnerable to Authorization Bypass in versions 1.56.2 - 1.60.3.

Authorization Bypass
Vuln in 1.56.2 - 1.60.3
Fixed in 1.60.4
No CVE available
TL;DR

Who does this affect?

How can it be fixed?

Background info

Link to vendor website

Logo
ยฉ 2024 Aikido Security BV | BE0792914919
๐Ÿ‡ช๐Ÿ‡บ Registered address: Coupure Rechts 88, 9000, Ghent, Belgium
๐Ÿ‡ช๐Ÿ‡บ Office address: Gebroeders van Eyckstraat 2, 9000, Ghent, Belgium
๐Ÿ‡บ๐Ÿ‡ธ Office address: 95 Third St, 2nd Fl, San Francisco, CA 94103, US
Any use of the intel.aikido.dev website and content is explicitly subject to Aikido Terms of Use.
The Intel vulnerability and malware feed is licensed under a dual license.