What’s Vulnerable › Products

BerriAI litellm vulnerabilities

47 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 39 published in the last 12 months.

Check whether your BerriAI litellm version is affected

Exploited BerriAI litellm vulnerabilities

• CVE-2026-59822 — BerriAI LiteLLM Improper Authentication Vulnerability
• CVE-2026-42271 — BerriAI LiteLLM Command Injection Vulnerability
• CVE-2026-42208 — BerriAI LiteLLM SQL Injection Vulnerability
• CVE-2026-33634 — Aquasecurity Trivy Embedded Malicious Code Vulnerability

Latest BerriAI litellm vulnerabilities

• CVE-2026-114612 — LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key (CVSS 9.9)
• CVE-2026-108575 — BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization (CVSS 6.3)
• CVE-2026-108574 — BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization (CVSS 4.3)
• CVE-2026-93355 — LiteLLM Weak JWT Authentication via Email-Based User Lookup (CVSS 8.1)
• CVE-2026-89032 — BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer (CVSS 7.7)
• CVE-2026-59823 — LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy (CVSS 5.3)
• CVE-2026-84377 — LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters (CVSS 6.5)
• CVE-2026-59822 — BerriAI LiteLLM Improper Authentication Vulnerability (CVSS 8.2) — exploited
• CVE-2026-59821 — LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks (CVSS 7.2)
• CVE-2026-59820 — LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 6.5)
• CVE-2026-59819 — LiteLLM: Local file read via request-supplied OIDC file references (CVSS 4.9)
• CVE-2026-49468 — LiteLLM: Authentication Bypass via Host Header Injection (CVSS 9.8)
• CVE-2026-12799 — BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization (CVSS 4.3)
• CVE-2026-12798 — BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery (CVSS 6.3)
• CVE-2026-12797 — BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization (CVSS 6.3)
• CVE-2026-12796 — BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration (CVSS 6.3)
• CVE-2026-12795 — BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication (CVSS 7.3)
• CVE-2026-12774 — BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery (CVSS 6.3)
• CVE-2026-12773 — BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication (CVSS 9.8)
• CVE-2026-12772 — BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration (CVSS 6.3)
• CVE-2026-12771 — BerriAI litellm M2M JWT user_api_key_auth.py improper authorization (CVSS 7.5)
• CVE-2026-12770 — BerriAI litellm Admin Key key_management_endpoints.py improper authorization (CVSS 8.8)
• CVE-2026-47102 — LiteLLM < 1.83.10 Privilege Escalation via User Update (CVSS 8.8)
• CVE-2026-47101 — LiteLLM < 1.83.14 Privilege Escalation via API Key Generation (CVSS 8.8)
• CVE-2026-42271 — BerriAI LiteLLM Command Injection Vulnerability (CVSS 8.8) — exploited