scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-10 03:28:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 84

security(router): prevent global cache hijacking via client-provided cache_kwargs

Browse source
This commit is contained in:
samearth17 2026-08-10 01:00:11 +05:30
parent 9a6366e90c
commit c3ddf89915
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
litellm/router.py
View file

@ -563,8 +563,14 @@ class Router:
if cache_responses:
if litellm.cache is None:
# the cache can be initialized on the proxy server. We should not overwrite it
litellm.cache = litellm.Cache(type=cache_type, **cache_config)
# SECURITY FIX: Do not allow a Router to initialize the global cache
# with client-provided cache_kwargs. This prevents cache exfiltration.
# The global cache must be initialized by the server admin or proxy config.
verbose_router_logger.warning(
"cache_responses=True but litellm.cache is None. "
"Global cache will not be initialized by the Router for security reasons. "
"Please configure litellm.cache globally."
)
self.cache_responses = cache_responses
self.cache = DualCache(
redis_cache=redis_cache, in_memory_cache=InMemoryCache()