From 0b13b2eaca590139aaed140fdbdadb81cbd37a80 Mon Sep 17 00:00:00 2001 From: Maximilian Rink Date: Sat, 10 Oct 2026 16:35:38 +0200 Subject: [PATCH] fix: use HMAC for caller cache namespaces --- litellm/caching/caching.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/litellm/caching/caching.py b/litellm/caching/caching.py index 6aff3b7dad7..e3ed9f7cdd2 100644 --- a/litellm/caching/caching.py +++ b/litellm/caching/caching.py @@ -9,6 +9,7 @@ import ast import hashlib +import hmac import json import logging import time @@ -643,7 +644,10 @@ class Cache: "user_role": getattr(auth_object, "user_role", None), } identity = json.dumps(identity_fields, sort_keys=True, default=str, separators=(",", ":")) - authenticated_namespace = "caller:" + hashlib.sha256(identity.encode("utf-8")).hexdigest()[:32] + caller_digest = hmac.new( + b"litellm-cache-namespace-v1", identity.encode("utf-8"), hashlib.sha256 + ).hexdigest() + authenticated_namespace = "caller:" + caller_digest[:32] break requested_namespace_value: Final = dynamic_cache_control.get("namespace") requested_namespace: Final[str | None] = (