Product by Open Source

    Litellm

    16 known vulnerabilities in Litellm (Open Source), 3 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Litellm (Open Source)
    CriticalCVE-2026-42208

    LiteLLM: SQL injection in Proxy API key verification

    In CISA KEValso in 2 other products

    		9.8
    CriticalCVE-2026-42271

    LiteLLM: Authenticated command execution via MCP stdio test endpoints

    In CISA KEValso in 3 other products

    		8.8
    CriticalCVE-2026-59822

    LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

    In CISA KEValso in 2 other products

    		8.2
    HighCVE-2026-35029

    LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

    also in 2 other products

    		8.8
    HighCVE-2026-40217

    BerriAI LiteLLM: Unprotected Alternate Channel

    also in 3 other products

    		8.8
    CriticalCVE-2026-30623

    open source LiteLLM: Remote Code Execution

    		9.8
    CriticalCVE-2026-49468

    LiteLLM: Authentication Bypass via Host Header Injection

    also in 2 other products

    		9.8
    HighCVE-2026-59821

    LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

    also in 2 other products

    		7.2
    CriticalCVE-2026-114612

    LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

    also in 1 other product

    		9.9
    MediumCVE-2026-84377

    BerriAI LiteLLM: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		6.5
    HighCVE-2026-89032

    BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer

    also in 1 other product

    		7.7
    MediumCVE-2026-59820

    LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    also in 2 other products

    		6.5
    MediumCVE-2026-59823

    LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy

    also in 1 other product

    		—
    MediumCVE-2026-59819

    LiteLLM: Local file read via request-supplied OIDC file references

    also in 2 other products

    		4.9
    MediumCVE-2026-108575

    BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization

    also in 1 other product

    		6.3
    MediumCVE-2026-108574

    BerriAI LiteLLM: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		4.3

    News

    All products by Open Source