berriai vulnerabilities

CVEs per yearBy the year they were published

1. 20249
2. 20256
3. 202631

Known exploitedNewest addition to KEV first

• CVE-2026-59822

  LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

  BerriAI · litellm

  ExploitedHigh8.8
• CVE-2026-42271

  LiteLLM: Authenticated command execution via MCP stdio test endpoints

  BerriAI · litellm

  ExploitedHigh8.7
• CVE-2026-42208

  LiteLLM: SQL injection in Proxy API key verification

  BerriAI · litellm

  ExploitedCritical9.3
• CVE-2026-33634

  Trivy ecosystem supply chain briefly compromised

  aquasecurity · setup-trivy

  ExploitedCritical9.4

Newest CVEs

• CVE-2026-114612

  LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

  BerriAI · litellm

  Critical9.9
• CVE-2026-108575

  BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization

  BerriAI · LiteLLM

  Medium5.3
• CVE-2026-108574

  BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization

  BerriAI · LiteLLM

  Medium5.3
• CVE-2026-93355

  LiteLLM Weak JWT Authentication via Email-Based User Lookup

  BerriAI · litellm

  High7.6
• CVE-2026-89032

  BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer

  BerriAI · litellm

  High8.7
• CVE-2026-59823

  LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy

  BerriAI · litellm

  Medium5.3
• CVE-2026-84377

  LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

  BerriAI · litellm

  Medium6.5
• CVE-2026-59819

  LiteLLM: Local file read via request-supplied OIDC file references

  BerriAI · litellm

  Low2.1
• CVE-2026-59822

  LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

  BerriAI · litellm

  ExploitedHigh8.8
• CVE-2026-59820

  LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

  BerriAI · litellm

  Medium6.1