Vendor

    BerriAI

    46 known vulnerabilities in products by BerriAI, 4 of them actively exploited (CISA KEV).

    Key figures

    46

    Vulnerabilities

    4

    Actively exploited (KEV)

    0

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in BerriAI
    CriticalCVE-2026-42208

    LiteLLM: SQL injection in Proxy API key verification

    In CISA KEValso in 2 other products

    		9.8
    CriticalCVE-2026-33634

    Trivy ecosystem supply chain briefly compromised

    In CISA KEValso in 4 other products

    		8.8
    CriticalCVE-2026-42271

    LiteLLM: Authenticated command execution via MCP stdio test endpoints

    In CISA KEValso in 3 other products

    		8.8
    CriticalCVE-2026-59822

    LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

    In CISA KEValso in 2 other products

    		8.2
    HighCVE-2026-35029

    LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

    also in 2 other products

    		8.8
    HighCVE-2026-40217

    BerriAI LiteLLM: Unprotected Alternate Channel

    also in 3 other products

    		8.8
    CriticalCVE-2026-49468

    LiteLLM: Authentication Bypass via Host Header Injection

    also in 2 other products

    		9.8
    HighCVE-2024-6587

    SSRF in berriai/litellm

    also in 1 other product

    		7.5
    CriticalCVE-2026-12773

    BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

    also in 1 other product

    		9.8
    HighCVE-2024-6825

    Remote Code Execution in BerriAI/litellm

    also in 1 other product

    		8.8
    HighCVE-2026-47101

    LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

    also in 1 other product

    		8.8
    CriticalCVE-2024-2952

    Server-Side Template Injection in BerriAI/litellm

    also in 1 other product

    		9.8
    HighCVE-2026-59821

    LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

    also in 2 other products

    		7.2
    CriticalCVE-2026-114612

    LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

    also in 1 other product

    		9.9
    CriticalCVE-2026-35030

    LiteLLM has an authentication bypass via OIDC userinfo cache key collision

    also in 1 other product

    		9.1
    HighCVE-2026-47102

    LiteLLM < 1.83.10 Privilege Escalation via User Update

    also in 1 other product

    		8.8
    CriticalCVE-2024-5751

    Remote Code Execution in BerriAI/litellm

    also in 1 other product

    		9.8
    CriticalCVE-2024-4264

    Remote Code Execution in berriai/litellm

    		9.8
    HighCVE-2026-12795

    BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication

    also in 1 other product

    		7.3
    HighCVE-2026-12770

    BerriAI litellm Admin Key key_management_endpoints.py improper authorization

    also in 1 other product

    		8.8
    HighCVE-2026-89032

    BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer

    also in 1 other product

    		7.7
    MediumCVE-2026-84377

    BerriAI LiteLLM: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		6.5
    HighCVE-2026-93355

    LiteLLM Weak JWT Authentication via Email-Based User Lookup

    		8.1
    HighCVE-2024-8984

    Denial of Service (DoS) in berriai/litellm

    also in 1 other product

    		7.5
    MediumCVE-2026-59820

    LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    also in 2 other products

    		6.5

    All vulnerabilities in search

    News

    Products

    Products by BerriAI
    BerriAI LiteLLM314
    Berriai/litellm150