CVE-2026-35029

Affected versions of the litellm package are vulnerable to Privilege Escalation due to missing admin role authorisation on the /config/update endpoint. This endpoint allows any authenticated user to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, read arbitrary server files via the UI_LOGO_PATH setting, and overwrite privileged account credentials by modifying UI_USERNAME and UI_PASSWORD environment variables. An authenticated low-privilege attacker can exploit this endpoint to achieve Remote Code Execution, read sensitive server files, or take over administrator accounts without requiring proxy_admin role privileges.