# LiteLLM security research note

## Scope

This document records the primary-source security issue used by `litellm-detector` for built-in advisory matching.

## Latest credential-leak issue found

- Advisory: `ZDI-25-929`
- CVE: `CVE-2025-11203`
- Public disclosure date: October 3, 2025
- Vendor disclosure timeline entry: March 25, 2025
- Fixed release referenced by LiteLLM: `v1.63.14-stable`

## What happened

According to ZDI, LiteLLM's health endpoint handling of `API_KEY` could expose sensitive information to an authenticated actor. That makes it directly relevant to credential leakage and downstream compromise risk.

## How this project uses that information

The tool applies a defensive rule: installed `litellm` versions lower than `1.63.14` are flagged with a warning. That is an inference for triage based on the published fixed version, not a complete vendor-issued affected-version matrix.

## Sources

- ZDI advisory: <https://www.zerodayinitiative.com/advisories/ZDI-25-929/>
- LiteLLM release note: <https://docs.litellm.ai/release_notes/v1.63.14-stable>
