Skip to content
Litellm vulnerabilities
Newest
-
berriai litellm
LiteLLM: Local file read via request-supplied OIDC file references
CVE-2026-59819
Fix available
2.1 Low
-
berriai litellm
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
CVE-2026-59822
In KEVPublic exploitFix available
8.8 High
-
berriai litellm
LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59820
Fix available
6.1 Medium
-
berriai litellm
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
CVE-2026-59821
Fix available
2.1 Low
-
berriai litellm
BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization
CVE-2026-12799
5.3 Medium
-
berriai litellm
BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery
CVE-2026-12798
5.3 Medium
-
berriai litellm
BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization
CVE-2026-12797
5.3 Medium
-
berriai litellm
BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration
CVE-2026-12796
5.3 Medium
-
berriai litellm
BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication
CVE-2026-12795
6.9 Medium
-
berriai litellm
BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery
CVE-2026-12774
5.3 Medium
-
berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more
BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
CVE-2026-12773
Fix available
6.9 Medium
-
berriai litellm
BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration
CVE-2026-12772
5.3 Medium
-
berriai litellm
BerriAI litellm M2M JWT user_api_key_auth.py improper authorization
CVE-2026-12771
2.3 Low
-
berriai litellm
BerriAI litellm Admin Key key_management_endpoints.py improper authorization
CVE-2026-12770
5.3 Medium
-
berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more
LiteLLM: Authentication Bypass via Host Header Injection
CVE-2026-49468
Public exploitFix available
9.5 Critical
-
berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more
LiteLLM < 1.83.10 Privilege Escalation via User Update
CVE-2026-47102
Public exploitFix available
8.7 High
-
berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more
LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
CVE-2026-47101
Public exploitFix available
8.7 High
-
berriai litellm, red hat exploit intelligence, ansible automation platform 2 +5 more +7 more
LiteLLM: Authenticated command execution via MCP stdio test endpoints
CVE-2026-42271
In KEVPublic exploitFix available
EPSS 91.4%
8.7 High
-
berriai litellm, red hat lightspeed core, ansible automation platform 2 +1 more +3 more
LiteLLM: SQL injection in Proxy API key verification
CVE-2026-42208
In KEVPublic exploitFix available
EPSS 89.4%
9.3 Critical
-
berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 more
LiteLLM: Server-Side Template Injection in /prompts/test endpoint
CVE-2026-42203
Public exploitFix available
8.6 High
-
berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +2 more +4 more
Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail
CVE-2026-40217
Public exploitFix available
EPSS 17.0%
8.8 High
-
berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 more
LiteLLM has an authentication bypass via OIDC userinfo cache key collision
CVE-2026-35030
Public exploitFix available
9.4 Critical
-
berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 more
LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint
CVE-2026-35029
Public exploitFix available
EPSS 38.6%
8.7 High
-
aquasec setup-trivy, trivy, aquasecurity trivy-action +3 more +5 more
Trivy ecosystem supply chain briefly compromised
CVE-2026-33634
In KEVPublic exploitFix available
EPSS 59.7%
9.4 Critical
-
berriai litellm
LiteLLM Information health API_KEY Information Disclosure Vulnerability
CVE-2025-11203
Public exploit
3.5 Low
-
litellm
BerriAI litellm v1.65.4 was discovered to contain a SQL injection vulnerability via the /key...
CVE-2025-45809
Public exploit
5.4 Medium
-
berriai berriai/litellm, litellm +1 more
Remote Code Execution in BerriAI/litellm
CVE-2024-6825
8.8 High
-
berriai berriai/litellm, litellm +1 more
Exposure of Sensitive Information in berriai/litellm
CVE-2025-0330
7.5 High
-
berriai berriai/litellm, litellm +1 more
Improper Output Neutralization for Logs in berriai/litellm
CVE-2024-9606
Fix available
7.5 High
-
berriai berriai/litellm, litellm +1 more
Denial of Service (DoS) in berriai/litellm
CVE-2024-8984
Fix available
7.5 High
-
berriai berriai/litellm, litellm +1 more
SSRF in berriai/litellm
CVE-2024-6587
Fix available
EPSS 34.4%
7.5 High
-
berriai berriai/litellm, litellm +1 more
Improper Access Control in Team Management in berriai/litellm
CVE-2024-5710
Fix available
5.3 Medium
-
berriai berriai/litellm, litellm +1 more
Remote Code Execution in BerriAI/litellm
CVE-2024-5751
Fix available
9.8 Critical
-
berriai berriai/litellm, litellm +1 more
Arbitrary File Deletion in BerriAI/litellm
CVE-2024-4888
Fix available
6.5 Medium
-
berriai berriai/litellm, litellm +1 more
Blind SQL Injection in berriai/litellm
CVE-2024-4890
4.9 Medium
-
berriai berriai/litellm, litellm +1 more
SQL Injection in berriai/litellm
CVE-2024-5225
Fix available
6.4 Medium
-
berriai berriai/litellm, litellm +1 more
Code Injection in berriai/litellm
CVE-2024-4889
7.2 High
-
berriai berriai/litellm, litellm +1 more
Server-Side Template Injection in BerriAI/litellm
CVE-2024-2952
Fix available
9.8 Critical