en
BerriAI is a software organization operating in generative AI infrastructure. Its core project, LiteLLM, is an open-source AI gateway and Python SDK for providing a unified interface to more than one large language model service. LiteLLM can be integrated as a library or deployed as a centralized, self-hosted gateway for development teams and organizations.
As of 09/15/2026, berriai recorded 16 security vulnerabilities in the last 90 days across 1 products, including 2 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, LiteLLM had the most security vulnerabilities in the berriai ecosystem, with 16 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-84377LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published09/02/2026 | SeverityMedium |
CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file references | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published07/08/2026 | SeverityLow |
CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback | Exploitation statusKEV | FixYes | Affected productLiteLLM | Published07/08/2026 | SeverityHigh |
CVE-2026-59820LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published07/08/2026 | SeverityMedium |
CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published07/08/2026 | SeverityLow |
CVE-2026-49468LiteLLM: Authentication Bypass via Host Header Injection | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published06/22/2026 | SeverityCritical |
CVE-2026-12799BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12797BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12796BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12795BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12774BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12773BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12772BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-12771BerriAI litellm M2M JWT user_api_key_auth.py improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published06/21/2026 | SeverityLow |
CVE-2026-12770BerriAI litellm Admin Key key_management_endpoints.py improper authorization | Exploitation statusPublic exploit | FixYes | Affected productLiteLLM | Published06/21/2026 | SeverityMedium |
CVE-2026-47102LiteLLM < 1.83.10 Privilege Escalation via User Update | Exploitation statusPublic exploit | FixYes | Affected productLiteLLM | Published05/21/2026 | SeverityHigh |
CVE-2026-47101LiteLLM < 1.83.14 Privilege Escalation via API Key Generation | Exploitation statusPublic exploit | FixYes | Affected productLiteLLM | Published05/21/2026 | SeverityHigh |
CVE-2026-42208LiteLLM: SQL injection in Proxy API key verification | Exploitation statusKEV | FixYes | Affected productLiteLLM | Published05/08/2026 | SeverityCritical |
CVE-2026-42203LiteLLM: Server-Side Template Injection in /prompts/test endpoint | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published05/08/2026 | SeverityHigh |
CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpoints | Exploitation statusKEV | FixYes | Affected productLiteLLM | Published05/08/2026 | SeverityHigh |
CVE-2026-40217 | Exploitation statusPublic exploit | FixNot confirmed | Affected productLiteLLM | Published04/10/2026 | SeverityHigh |
CVE-2026-35030LiteLLM has an authentication bypass via OIDC userinfo cache key collision | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published04/06/2026 | SeverityCritical |
CVE-2026-35029LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint | Exploitation statusNot known exploited | FixYes | Affected productLiteLLM | Published04/06/2026 | SeverityHigh |
CVE-2026-33634Trivy ecosystem supply chain briefly compromised | Exploitation statusKEV | FixNot confirmed | Affected productLiteLLM | Published03/23/2026 | SeverityCritical |
CVE-2024-6825Remote Code Execution in BerriAI/litellm | Exploitation statusPublic exploit | FixYes | Affected productberriai/litellm | Published03/20/2025 | SeverityHigh |
CVE-2024-10188Denial of Service in BerriAI/litellm | Exploitation statusPublic exploit | FixYes | Affected productberriai/litellm | Published03/20/2025 | SeverityHigh |
CVE-2025-0628Improper Authorization in BerriAI/litellm | Exploitation statusPublic exploit | FixYes | Affected productberriai/litellm | Published03/20/2025 | SeverityHigh |
CVE-2025-0330Exposure of Sensitive Information in berriai/litellm | Exploitation statusPublic exploit | FixNot confirmed | Affected productberriai/litellm | Published03/20/2025 | SeverityHigh |
CVE-2024-9606Improper Output Neutralization for Logs in berriai/litellm | Exploitation statusPublic exploit | FixYes | Affected productberriai/litellm | Published03/20/2025 | SeverityHigh |
CVE-2024-8984Denial of Service (DoS) in berriai/litellm | Exploitation statusPublic exploit | FixYes | Affected productberriai/litellm | Published03/20/2025 | SeverityHigh |
CVE-2024-6587SSRF in berriai/litellm | Exploitation statusPublic exploit | FixYes | Affected productberriai/litellm | Published09/13/2024 | SeverityHigh |
CVE-2024-5710Improper Access Control in Team Management in berriai/litellm | Exploitation statusPublic exploit | FixNot confirmed | Affected productberriai/litellm | Published06/27/2024 | SeverityMedium |
CVE-2024-5751Remote Code Execution in BerriAI/litellm | Exploitation statusPublic exploit | FixNot confirmed | Affected productberriai/litellm | Published06/27/2024 | SeverityCritical |
CVE-2024-4888Arbitrary File Deletion in BerriAI/litellm | Exploitation statusPublic exploit | FixNot confirmed | Affected productberriai/litellm | Published06/06/2024 | SeverityMedium |
CVE-2024-4890Blind SQL Injection in berriai/litellm | Exploitation statusPublic exploit | FixNot confirmed | Affected productberriai/litellm | Published06/06/2024 | SeverityMedium |
CVE-2024-5225SQL Injection in berriai/litellm | Exploitation statusPublic exploit | FixNot confirmed | Affected productberriai/litellm | Published06/06/2024 | SeverityMedium |
CVE-2024-4889Code Injection in berriai/litellm | Exploitation statusNot known exploited | FixNot confirmed | Affected productberriai/litellm | Published06/06/2024 | SeverityHigh |
CVE-2024-4264Remote Code Execution in berriai/litellm | Exploitation statusPublic exploit | FixNot confirmed | Affected productberriai/litellm | Published05/18/2024 | SeverityCritical |
CVE-2024-2952Server-Side Template Injection in BerriAI/litellm | Exploitation statusPublic exploit | FixYes | Affected productberriai/litellm | Published04/10/2024 | SeverityCritical |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
