CVE-2026-59823: LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

September 17, 2026

A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy’s outbound request to a host of their choosing by smuggling an api_base inside the user_config request body, bypassing the existing parameter guard.

References

github.com/BerriAI/litellm/commit/47214be317f45a2d2ac08258362e0481411eb427
github.com/BerriAI/litellm/pull/25827
github.com/BerriAI/litellm/security/advisories/GHSA-hx8v-g79f-8w5f
github.com/advisories/GHSA-hx8v-g79f-8w5f
nvd.nist.gov/vuln/detail/CVE-2026-59823

Code Behaviors & Features

Detect and mitigate CVE-2026-59823 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →