CVE-2026-59819 Details

A local file read vulnerability has been identified in LiteLLM versions prior to 1.83.10-stable. The issue arises in the '/health/test_connection' endpoint, which improperly resolves request-supplied environment and OIDC file references in 'litellm_params'. This flaw allows a proxy administrator or another privileged user with permission to test model connections to read files from the local filesystem using an 'oidc/file/' reference. Exploitation requires privileged access to the proxy, categorizing this as a defense-in-depth issue rather than a cross-tenant privilege bypass.

Users are advised to upgrade to LiteLLM version 1.83.10-stable or later. Additionally, access to the '/health/test_connection' endpoint should be restricted to trusted administrators only.