6 min read
Vulnerabilities A CVSS 9.9 flaw in LiteLLM lets an authenticated internal user forge an administrator token because the proxy reuses one encryption context for stored secrets and session tokens. Admin access leads to commands on the host through the MCP stdio endpoint. Fixed in four stable lines and one release candidate.