litellm
- Software type
- AI and machine learning platform
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, litellm recorded 7 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of litellm and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyCVE-2026-108575Improper authorization in BerriAI LiteLLM Secret ResolutionCVE-2026-108574BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorizationCVE-2026-93355LiteLLM Weak JWT Authentication via Email-Based User LookupCVE-2026-89032BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key | Exploitation statusNot exploited | FixYes |
| SeverityCritical |
CVE-2026-108575Improper authorization in BerriAI LiteLLM Secret Resolution | Exploitation statusActively exploited | FixNo | Published10/11/2026 | SeverityMedium |
|---|
CVE-2026-108574BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization | Exploitation statusActively exploited | FixYes | Published10/11/2026 | SeverityMedium |
|---|
CVE-2026-93355LiteLLM Weak JWT Authentication via Email-Based User Lookup | Exploitation statusActively exploited | FixNo | Published09/28/2026 | SeverityHigh |
|---|
CVE-2026-89032BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer | Exploitation statusNot exploited | FixYes | Published09/25/2026 | SeverityHigh |
|---|
CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityMedium |
|---|
CVE-2026-84377LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters | Exploitation statusNot exploited | FixYes | Published09/02/2026 | SeverityMedium |
|---|
CVE-2026-59822BerriAI LiteLLM MCP authentication bypass through OAuth2 passthrough fallback | Exploitation statusKEV | FixYes | Published07/08/2026 | SeverityHigh |
|---|
CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks | Exploitation statusNot exploited | FixYes | Published07/08/2026 | SeverityLow |
|---|
CVE-2026-59820LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Exploitation statusNot exploited | FixYes | Published07/08/2026 | SeverityMedium |
|---|
CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file references | Exploitation statusNot exploited | FixYes | Published07/08/2026 | SeverityLow |
|---|
CVE-2026-49468LiteLLM: Authentication Bypass via Host Header Injection | Exploitation statusNot exploited | FixYes | Published06/22/2026 | SeverityCritical |
|---|
CVE-2026-12799BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12797BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12796BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12795BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12774BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12773BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12772BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-12771BerriAI litellm M2M JWT user_api_key_auth.py improper authorization | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityLow |
|---|
CVE-2026-12770BerriAI litellm Admin Key key_management_endpoints.py improper authorization | Exploitation statusActively exploited | FixYes | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-47102LiteLLM < 1.83.10 Privilege Escalation via User Update | Exploitation statusActively exploited | FixYes | Published05/21/2026 | SeverityHigh |
|---|
CVE-2026-47101LiteLLM < 1.83.14 Privilege Escalation via API Key Generation | Exploitation statusActively exploited | FixYes | Published05/21/2026 | SeverityHigh |
|---|
CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpoints | Exploitation statusKEV | FixYes | Published05/08/2026 | SeverityHigh |
|---|
CVE-2026-42208LiteLLM: SQL injection in Proxy API key verification | Exploitation statusKEV | FixYes | Published05/08/2026 | SeverityCritical |
|---|
CVE-2026-42203LiteLLM: Server-Side Template Injection in /prompts/test endpoint | Exploitation statusNot exploited | FixYes | Published05/08/2026 | SeverityHigh |
|---|
CVE-2026-40217CVE-2026-40217 | Exploitation statusActively exploited | FixNo | Published04/10/2026 | SeverityHigh |
|---|
CVE-2026-35030LiteLLM has an authentication bypass via OIDC userinfo cache key collision | Exploitation statusNot exploited | FixYes | Published04/06/2026 | SeverityCritical |
|---|
CVE-2026-35029LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint | Exploitation statusNot exploited | FixYes | Published04/06/2026 | SeverityHigh |
|---|
CVE-2026-33634Trivy ecosystem supply chain briefly compromised | Exploitation statusKEV | FixNo | Published03/23/2026 | SeverityCritical |
|---|
31 Results | Page 1 of 1