From a291cc60cf9324e85a003641fa79e59a48834b6c Mon Sep 17 00:00:00 2001 From: Ryan Crabbe Date: Wed, 29 Apr 2026 15:11:29 -0700 Subject: [PATCH] fix: drop sensitive locals from re-raised error messages Remove parameters that may contain credentials from the messages built inside broad except handlers. These messages can surface in HTTP error responses, so caller-supplied secrets and integration tokens shouldn't be interpolated into them. --- litellm/integrations/prompt_management_base.py | 4 ++-- .../llm_response_utils/convert_dict_to_response.py | 2 -- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/litellm/integrations/prompt_management_base.py b/litellm/integrations/prompt_management_base.py index 71da650dc4..ab6ef9e32d 100644 --- a/litellm/integrations/prompt_management_base.py +++ b/litellm/integrations/prompt_management_base.py @@ -88,7 +88,7 @@ class PromptManagementBase(ABC): messages = compiled_prompt_client["prompt_template"] + client_messages except Exception as e: raise ValueError( - f"Error compiling prompt: {e}. Prompt id={prompt_id}, prompt_variables={prompt_variables}, client_messages={client_messages}, dynamic_callback_params={dynamic_callback_params}" + f"Error compiling prompt: {e}. Prompt id={prompt_id}, prompt_variables={prompt_variables}, client_messages={client_messages}" ) compiled_prompt_client["completed_messages"] = messages @@ -117,7 +117,7 @@ class PromptManagementBase(ABC): messages = compiled_prompt_client["prompt_template"] + client_messages except Exception as e: raise ValueError( - f"Error compiling prompt: {e}. Prompt id={prompt_id}, prompt_variables={prompt_variables}, client_messages={client_messages}, dynamic_callback_params={dynamic_callback_params}" + f"Error compiling prompt: {e}. Prompt id={prompt_id}, prompt_variables={prompt_variables}, client_messages={client_messages}" ) compiled_prompt_client["completed_messages"] = messages diff --git a/litellm/litellm_core_utils/llm_response_utils/convert_dict_to_response.py b/litellm/litellm_core_utils/llm_response_utils/convert_dict_to_response.py index 78378faa26..5fd42fe0d3 100644 --- a/litellm/litellm_core_utils/llm_response_utils/convert_dict_to_response.py +++ b/litellm/litellm_core_utils/llm_response_utils/convert_dict_to_response.py @@ -824,8 +824,6 @@ def convert_to_model_response_object( # noqa: PLR0915 stream=stream, start_time=start_time, end_time=end_time, - hidden_params=hidden_params, - _response_headers=_response_headers, convert_tool_call_to_json_mode=convert_tool_call_to_json_mode, ) raise Exception(