An unauthenticated attacker can trigger an arbitrary file read on any LLM route in the LiteLLM Enterprise proxy, exposing the proxy’s master key and third‑party API credentials. With the leaked master key, administrators can be impersonated and, in certain configurations, execute code with root privileges. The flaw represents a severe information disclosure (CWE‑200) that can compromise confidentiality, integrity, and availability of the entire LLM deployment.

The vulnerability affects the LiteLLM Enterprise proxy. No specific version information is provided, so all released builds are potentially impacted until a patch is applied.

The CVSS score of 9.8 indicates critical severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The flaw is exploitable remotely by unauthenticated users who can access any LLM route; once the master key is harvested, an attacker can achieve remote code execution as root on the host. The absence of authentication requirements and the potential to elevate privileges make the exploitation path straightforward.