Login Request a demo
LI
Product
litellm
by BerriAI · last CVE Oct 11, 2026
On CISA KEVExploited in the wild
39
CVEs
4
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities39In the news12Timeline
Severity mix
Critical 6High 20Medium 13Low 0
Severity
All severities39Critical6High20Medium13Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add litellm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42208
In wildKEV
9.8
89%
May 8
LiteLLM: SQL injection in Proxy API key verification
Affected: 1.81.16 before 1.83.7
CVE-2026-49468
9.8
3%
Jun 22
LiteLLM: Authentication Bypass via Host Header Injection
Affected: before 1.84.0
CVE-2026-12773
9.8
1%
Jun 21
BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
Affected: 1.59.0; 1.59.1; 1.59.2; 1.59.3; 1.59.4; 1.59.5; +3 more
CVE-2024-5751
9.8
1%
Jun 27
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution
Affected: 1.35.8
CVE-2024-2952
9.8
1%
Apr 10
BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint
Affected: before 1.34.42
CVE-2026-35030
9.1
1%
Apr 6
LiteLLM has an authentication bypass via OIDC userinfo cache key collision
Affected: before 1.83.0
Showing 6