https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T19:53:01.489630+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/brew-rawdog-ghsa-g5ff-637f-6q2m BREW-rawdog-GHSA-g5ff-637f-6q2m — LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials` 2026-11-08T19:53:01.491113+00:00

Affected: Homebrew: rawdog

## Summary

An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted `vertex_ai_credentials` value to `/utils/transform_request`. The request-body safety blocklist rejected `vertex_credentials` but missed its alias `vertex_ai_credentials`, which let the value reach the Vertex AI credential loader and trigger a file read that is sent to an attacker-controlled URL.

## Impact

A low-privilege authenticated user (only `internal_user_viewer`, obtainable through SSO login on many deployments) could read any file readable by the LiteLLM process. Reading files such as `/proc/self/environ` can disclose `LITELLM_MASTER_KEY` and provider API keys, so the impact can escalate to full proxy-admin control.

## Remediation

Upgrade to `1.95.0` or later. The fix adds the missing alias to the request-body blocklist, so no configuration change is needed once you upgrade. There is no reliable configuration workaround on affected versions.

 https://db.gcve.eu/vuln/cleanstart-2026-px15708 CLEANSTART-2026-PX15708 — Security fix for GHSA-g5ff-637f-6q2m applied in: airflow-3 3.3.2-r1 2026-11-08T19:53:01.491213+00:00

Affected: CleanStart: airflow-3

Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details.