CVE-2026-59823: LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

September 17, 2026

A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy’s outbound request to a host of their choosing by smuggling an api_base inside the user_config request body, bypassing the existing parameter guard.

References

github.com/BerriAI/litellm/commit/47214be317f45a2d2ac08258362e0481411eb427
github.com/BerriAI/litellm/pull/25827
github.com/BerriAI/litellm/security/advisories/GHSA-hx8v-g79f-8w5f
github.com/advisories/GHSA-hx8v-g79f-8w5f
nvd.nist.gov/vuln/detail/CVE-2026-59823

Code Behaviors & Features

Detect and mitigate CVE-2026-59823 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →