LI
Product
litellm
On CISA KEVExploited in the wild
40
CVEs
4
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 6High 20Medium 13Low 1
Watch
Add litellm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59820 | 6.5 | Jul 8 | LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affected: before 1.83.7; 1.83.7 |
| CVE-2024-5710 | 6.5 | Jun 27 | berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality Affected: 1.34.34 |
| CVE-2026-108575 | 6.3 | Oct 11 | BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2026-12798 | 6.3 | Jun 21 | BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery Affected: 1.82.0; 1.82.1; 1.82.2 |
| CVE-2026-12797 | 6.3 | Jun 21 | BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization Affected: 1.82.0; 1.82.1; 1.82.2; 1.82.3; 1.82.4; 1.82.5 |
| CVE-2026-12796 | 6.3 | Jun 21 | BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration Affected: 1.82.0; 1.82.1; 1.82.2 |
| CVE-2026-12774 | 6.3 | Jun 21 | BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery Affected: 1.82.0; 1.82.1; 1.82.2 |
| CVE-2026-12772 | 6.3 | Jun 21 | BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration Affected: 1.82.0; 1.82.1; 1.82.2 |
| CVE-2025-45809 | 5.4 | Jul 3 | SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API… Affected: 1.65.4 |
| CVE-2026-59819 | 4.9 | Jul 8 | LiteLLM: Local file read via request-supplied OIDC file references Affected: before 1.83.10; 1.83.10 |
| CVE-2024-4890 | 4.9 | Jun 6 | A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process Affected: 1.27.14 |
| CVE-2026-108574 | 4.3 | Oct 11 | BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2026-12799 | 4.3 | Jun 21 | BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization Affected: 1.82.0; 1.82.1; 1.82.2 |
Showing 13