Berriai Litellm vulnerabilities

• berriai litellm LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key CVE-2026-114612 Public exploitFix available 9.9 CriticalOctober 22, 2026
• berriai litellm BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization CVE-2026-108575 5.3 MediumOctober 11, 2026
• berriai litellm BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization CVE-2026-108574 5.3 MediumOctober 11, 2026
• berriai litellm LiteLLM Weak JWT Authentication via Email-Based User Lookup CVE-2026-93355 Public exploit 7.6 HighSeptember 28, 2026
• berriai litellm BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer CVE-2026-89032 8.7 HighSeptember 25, 2026
• berriai litellm LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy CVE-2026-59823 Fix available 5.3 MediumSeptember 16, 2026
• berriai litellm LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters CVE-2026-84377 Fix available 6.5 MediumSeptember 2, 2026
• berriai litellm LiteLLM: Local file read via request-supplied OIDC file references CVE-2026-59819 Fix available 2.1 LowJuly 8, 2026
• berriai litellm LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback CVE-2026-59822 In KEVPublic exploitFix available 8.8 HighJuly 8, 2026
• berriai litellm LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-59820 Fix available 6.1 MediumJuly 8, 2026
• berriai litellm LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks CVE-2026-59821 Fix available 2.1 LowJuly 8, 2026
• berriai litellm BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization CVE-2026-12799 5.3 MediumJune 21, 2026
• berriai litellm BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery CVE-2026-12798 5.3 MediumJune 21, 2026
• berriai litellm BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization CVE-2026-12797 5.3 MediumJune 21, 2026
• berriai litellm BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration CVE-2026-12796 5.3 MediumJune 21, 2026
• berriai litellm BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication CVE-2026-12795 6.9 MediumJune 21, 2026
• berriai litellm BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery CVE-2026-12774 5.3 MediumJune 21, 2026
• berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication CVE-2026-12773 Fix available 6.9 MediumJune 21, 2026
• berriai litellm BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration CVE-2026-12772 5.3 MediumJune 21, 2026
• berriai litellm BerriAI litellm M2M JWT user_api_key_auth.py improper authorization CVE-2026-12771 2.3 LowJune 21, 2026
• berriai litellm BerriAI litellm Admin Key key_management_endpoints.py improper authorization CVE-2026-12770 5.3 MediumJune 21, 2026
• berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more LiteLLM: Authentication Bypass via Host Header Injection CVE-2026-49468 Public exploitFix available 9.5 CriticalJune 16, 2026
• berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more LiteLLM < 1.83.10 Privilege Escalation via User Update CVE-2026-47102 Public exploitFix available 8.7 HighMay 21, 2026
• berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more LiteLLM < 1.83.14 Privilege Escalation via API Key Generation CVE-2026-47101 Public exploitFix available 8.7 HighMay 21, 2026
• berriai litellm, red hat exploit intelligence, ansible automation platform 2 +5 more +7 more LiteLLM: Authenticated command execution via MCP stdio test endpoints CVE-2026-42271 In KEVPublic exploitFix available EPSS 91.4% 8.7 HighApril 25, 2026
• berriai litellm, red hat lightspeed core, ansible automation platform 2 +1 more +3 more LiteLLM: SQL injection in Proxy API key verification CVE-2026-42208 In KEVPublic exploitFix available EPSS 89.4% 9.3 CriticalApril 24, 2026
• berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more LiteLLM: Server-Side Template Injection in /prompts/test endpoint CVE-2026-42203 Public exploitFix available 8.6 HighApril 24, 2026
• berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +2 more +4 more Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail CVE-2026-40217 Public exploitFix available EPSS 17.0% 8.8 HighApril 10, 2026
• berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 more LiteLLM has an authentication bypass via OIDC userinfo cache key collision CVE-2026-35030 Public exploitFix available 9.4 CriticalApril 3, 2026
• berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 more LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint CVE-2026-35029 Public exploitFix available EPSS 38.6% 8.7 HighApril 3, 2026
• aquasec setup-trivy, trivy, aquasecurity trivy-action +3 more +5 more Trivy ecosystem supply chain briefly compromised CVE-2026-33634 In KEVPublic exploitFix available EPSS 60.4% 9.4 CriticalMarch 23, 2026
• berriai litellm LiteLLM Information health API_KEY Information Disclosure Vulnerability CVE-2025-11203 Public exploit 3.5 LowOctober 29, 2025
• berriai berriai/litellm, litellm +1 more Remote Code Execution in BerriAI/litellm CVE-2024-6825 8.8 HighMarch 20, 2025
• berriai berriai/litellm Denial of Service in BerriAI/litellm CVE-2024-10188 Fix available 7.5 HighMarch 20, 2025
• berriai berriai/litellm Improper Authorization in BerriAI/litellm CVE-2025-0628 Fix available 8.1 HighMarch 20, 2025
• berriai berriai/litellm, litellm +1 more Exposure of Sensitive Information in berriai/litellm CVE-2025-0330 7.5 HighMarch 20, 2025
• berriai berriai/litellm, litellm +1 more Improper Output Neutralization for Logs in berriai/litellm CVE-2024-9606 Fix available 7.5 HighMarch 20, 2025
• berriai berriai/litellm, litellm +1 more Denial of Service (DoS) in berriai/litellm CVE-2024-8984 Fix available 7.5 HighMarch 20, 2025
• berriai berriai/litellm, litellm +1 more SSRF in berriai/litellm CVE-2024-6587 Fix available EPSS 34.4% 7.5 HighSeptember 13, 2024
• cysoft168 super easy enterprise management system, berriai litellm +1 more SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows... CVE-2024-42679 7.8 HighAugust 15, 2024
• berriai berriai/litellm, litellm +1 more Improper Access Control in Team Management in berriai/litellm CVE-2024-5710 Fix available 5.3 MediumJune 27, 2024
• berriai berriai/litellm, litellm +1 more Remote Code Execution in BerriAI/litellm CVE-2024-5751 Fix available 9.8 CriticalJune 27, 2024
• berriai berriai/litellm, litellm +1 more Arbitrary File Deletion in BerriAI/litellm CVE-2024-4888 Fix available 6.5 MediumJune 6, 2024
• berriai berriai/litellm, litellm +1 more Blind SQL Injection in berriai/litellm CVE-2024-4890 4.9 MediumJune 6, 2024
• berriai berriai/litellm, litellm +1 more SQL Injection in berriai/litellm CVE-2024-5225 Fix available 6.4 MediumJune 6, 2024
• berriai berriai/litellm, litellm +1 more Code Injection in berriai/litellm CVE-2024-4889 7.2 HighJune 6, 2024
• berriai berriai/litellm, litellm +1 more Remote Code Execution in berriai/litellm CVE-2024-4264 9.8 CriticalMay 18, 2024
• berriai berriai/litellm, litellm +1 more Server-Side Template Injection in BerriAI/litellm CVE-2024-2952 Fix available 9.8 CriticalApril 10, 2024