scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-07 08:26:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 36

security(router): prevent global cache hijacking via client-provided cache_kwargs

Browse source
This commit is contained in:
samearth17 2026-08-10 01:10:10 +05:30
parent c3ddf89915
commit e19ed193f1
1 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
litellm/router.py
View file

@ -525,19 +525,15 @@ class Router:
self.deployment_names: list = [] # names of models under litellm_params. ex. azure/chatgpt-v-2
self.deployment_latency_map = {}
### CACHING ###
cache_type: Literal["local", "redis", "redis-semantic", "s3", "disk"] = "local" # default to an in-memory cache
redis_cache = None
cache_config: Final[dict[str, Any]] = {}
# FIX: Apply cache_kwargs regardless of whether Redis is used
cache_config.update(cache_kwargs)
if "type" in cache_config:
# Pop removes 'type' from cache_config and assigns it to cache_type.
# This prevents passing 'type' twice to litellm.Cache() later.
cache_type = cache_config.pop("type")
# Pop removes 'type' from cache_config to prevent it from being pass
cache_config.pop("type")
self.client_ttl = client_ttl
if redis_url is not None or (redis_host is not None and redis_port is not None):
cache_type = "redis"
if redis_url is not None:
cache_config["url"] = redis_url