A flaw in the /health/test_connection endpoint of LiteLLM allows an authorized caller to provide an oidc/file reference that the server resolves against the host’s local filesystem. This gives the attacker the ability to read arbitrary files on the host, potentially exposing configuration data, secrets, or other sensitive information. The weakness is a classic local file read (CWE‑22, CWE‑73) and does not grant code execution but can compromise confidentiality for any file accessible to the server.

All BerriAI LiteLLM releases older than version 1.83.10-stable are impacted. Releases from v1.83.10-stable onward contain a fix that blocks resolution of OIDC file references in this endpoint. The vulnerability therefore affects any installation of LiteLLM running one of the older versions on any supported platform.

The CVSS score of 2.1 indicates low severity, and the EPSS score below 1% reflects a low probability of exploitation. The flaw requires the attacker to have permission to invoke the /health/test_connection endpoint, typically restricted to administrators or internal users, which narrows the attack surface. While the overall risk is low, the potential to read confidential files warrants timely remediation in environments that store sensitive data.