---
schema_version: '1.0'
id: security-20260711-40da24
url: https://osv.dev/vulnerability/GHSA-69x8-hrgq-fjj8
url_hash: 40da24a1262654dc3d2fe69684b76631c117f6611bf2ecb7c5ba4e1061fc75d7
canonical_url: https://osv.dev/vulnerability/GHSA-69x8-hrgq-fjj8
source: osv:ghsa
category: security/library
category_raw: cve/library
region: null
tags:
- cve
- GHSA-69x8-hrgq-fjj8
- severity:CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
- litellm
- PyPI
lang: en
published_at: '2026-04-08T00:04:12Z'
fetched_at: '2026-07-11T06:37:17Z'
updated_at: '2026-07-11T06:39:11Z'
status: published
content_hash: bb2ea4ac0d86a0354d9c4d8aa258e49689a9f1e5826beeed18acecb955be2728
license_note: full
summary: 'LiteLLM: Password hash exposure and pass-the-hash authentication bypass'
summary_source: rss
summary_en: 'LiteLLM: Password hash exposure and pass-the-hash authentication bypass'
entities:
- name: HashTag
  type: concept
- name: AND CaaaLL
  type: person
key_facts: []
related: []
related_auto:
- name: SustainableQuantumComputing
  type: concept
  weight: 3.0
- name: Shibu3 project
  type: organization
  weight: 1.0
- name: 豊田ルナ
  type: person
  weight: 1.0
- name: 東条澪
  type: person
  weight: 1.0
title: 'GHSA-69x8-hrgq-fjj8: LiteLLM: Password hash exposure and pass-the-hash authentication
  bypass'
---

# GHSA-69x8-hrgq-fjj8: LiteLLM: Password hash exposure and pass-the-hash authentication bypass

## TL;DR
LiteLLM: Password hash exposure and pass-the-hash authentication bypass

## Key Points
- cve / GHSA-69x8-hrgq-fjj8 / severity:CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N / litellm / PyPI

## Details
**Severity:** CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
**Advisory:** GHSA-69x8-hrgq-fjj8

**Affected (your watchlist):**
- `PyPI:litellm` 1.72.6.post2 → fixed in 1.83.0 [docker/docker-strands]

**Details:**
### Impact

Three issues combine into a full authentication bypass chain:

1. Weak hashing: User passwords are stored as unsalted SHA-256 hashes, making them vulnerable to rainbow table attacks and trivially identifying users with identical passwords.
2. Hash exposure: Multiple API endpoints (/user/info, /user/update, /spend/users) return the password hash field in responses to any authenticated user regardless of role. Plaintext passwords could also potentially be exposed in certain scenarios.
4. Pass-the-hash: The /v2/login endpoint accepts the raw SHA-256 hash as a valid password without re-hashing, allowing direct login with a stolen

An already authenticated user can retrieve another user's password hash from the API and use it to log in as that user. This enables full privilege escalation in three HTTP requests.

### Patches

Fixed in v1.83.0. Passwords are now hashed with scrypt (random 16-byte salt, n=16384, r=8, p=1). Password hashes are stripped from all API responses. Existing SHA-256 hashes are transparently migrated on next login.

**References:**
- https://github.com/BerriAI/litellm/security/advisories/GHSA-69x8-hrgq-fjj8
- https://github.com/BerriAI/litellm

_Data: OSV.dev (upstream: ghsa) — https://osv.dev/vulnerability/GHSA-69x8-hrgq-fjj8_

## Source
元記事: [GHSA-69x8-hrgq-fjj8: LiteLLM: Password hash exposure and pass-the-hash authentication bypass](https://osv.dev/vulnerability/GHSA-69x8-hrgq-fjj8) — published 2026-04-08T00:04:12Z