¡¾Îó²îͨ¸æ¡¿LiteLLMÄ£°å×¢ÈëÎó²î(CVE-2026-42203)
Ðû²¼Ê±¼ä 2026-05-14Ò»¡¢Îó²î¸ÅÊö

LiteLLMÊÇÒ»¿î¿ªÔ´LLM´úÀíÓëAI Gateway×é¼þ£¬ÓÃÓÚÒÔOpenAI¼æÈÝÃûÌÃͳһŲÓÃOpenAI¡¢AnthropicµÈ¶àÀà´óÄ£×Ó·þÎñ¡£ÆäÖ§³ÖÄ£×Ó·ÓÉ¡¢API key¹ÜÀí¡¢»á¼û¿ØÖÆ¡¢ÓÃÁ¿Í³¼Æ¼°´úÀíת·¢µÈÄÜÁ¦£¬³£ÓÃÓÚÆóÒµ´óÄ£×Ó½ÓÈëÓëÍ³Ò»Íø¹Ø¹ÜÀí³¡¾°¡£2026Äê5ÔÂ14ÈÕ£¬×ðÁú¿¹ÙÍøÈë¿ÚÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½LiteLLMÄ£°å×¢ÈëÎó²î¡£¸ÃÎó²î±£´æÓÚPOST /prompts/test½Ó¿Ú£¬ÓÉÓÚ½Ó¿Ú½ÓÊÜÓû§Ìá½»µÄprompt templates²¢ÔÚδ¾ÙÐÐɳÏä¸ôÀëµÄÇéÐÎÏÂäÖȾ£¬µ¼ÖÂÒÑÈÏÖ¤¹¥»÷Õ߿ɽṹ¶ñÒâÄ£°åÔÚLiteLLM ProxyÀú³ÌÄÚÖ´ÐÐí§Òâ´úÂë¡£¹¥»÷Õß½öÐè³ÖÓÐÓÐÓÃproxy API key¼´¿É»á¼û¸Ã½Ó¿Ú£¬½ø¶ø¿ÉÄܶÁÈ¡Àú³ÌÇéÐαäÁ¿ÖеÄprovider API keys¡¢Êý¾Ý¿âƾ֤µÈÃô¸ÐÐÅÏ¢£¬»òÔÚÖ÷»úÉÏÖ´ÐÐϵͳÏÂÁÔì³ÉӪҵϵͳ±»½ÓÊÜ¡¢ÃÜԿй¶¼°Êý¾ÝÇ徲Σº¦¡£
¶þ¡¢Ó°Ïì¹æÄ£
1.80.5 <= LiteLLM < 1.83.7
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡£¬ÒÔÐÞ¸´¸ÃÎó²î¡£LiteLLM >= 1.83.7ÏÂÔØÁ´½Ó£ºhttps://github.com/BerriAI/litellm/releases/
3.2 ÔÝʱ²½·¥ÔÝÎÞ¡£
3.3 ͨÓý¨Òé°´ÆÚ¸üÐÂϵͳ²¹¶¡£¬ïÔÌϵͳÎó²î£¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ¡£ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬Ð޸ķÀ»ðǽսÂÔ£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ£¬ïÔ̽«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ïÔ̹¥»÷Ãæ¡£Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£ÔöǿϵͳÓû§ºÍȨÏÞ¹ÜÀí£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔÔò£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£
3.4 ²Î¿¼Á´½Óhttps://github.com/BerriAI/litellm/security/advisories/GHSA-xqmj-j6mv-4862/https://nvd.nist.gov/vuln/detail/CVE-2026-42203


¾©¹«Íø°²±¸11010802024551ºÅ