BE
Vendor
BerriAI
19
CVEs
4
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114612 New | LI litellm BerriAI | 9.9 | Oct 22 | LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key |
| CVE-2026-93355 | LI litellm BerriAI | 8.1 | Sep 28 | LiteLLM Weak JWT Authentication via Email-Based User Lookup |
| CVE-2026-89032 | LI litellm BerriAI | 7.7 | Sep 25 | BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer |
| CVE-2026-59823 | LI litellm BerriAI | 5.3 | Sep 16 | LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy |
| CVE-2026-84377 | LI litellm BerriAI | 6.5 | Sep 2 | LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters |
| CVE-2026-59819 | LI litellm BerriAI | 4.9 | Jul 8 | LiteLLM: Local file read via request-supplied OIDC file references |
| CVE-2026-59822 In wildKEV | LI litellm BerriAI | 8.2 | Jul 8 | LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback |
| CVE-2026-59820 | LI litellm BerriAI | 6.5 | Jul 8 | LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2026-59821 | LI litellm BerriAI | 7.2 | Jul 8 | LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks |
| CVE-2026-49468 | LI litellm BerriAI | 9.8 | Jun 22 | LiteLLM: Authentication Bypass via Host Header Injection |
| CVE-2026-47102 | LI litellm BerriAI | 8.8 | May 21 | LiteLLM < 1.83.10 Privilege Escalation via User Update |
| CVE-2026-47101 | LI litellm BerriAI | 8.8 | May 21 | LiteLLM < 1.83.14 Privilege Escalation via API Key Generation |
| CVE-2026-42208 In wildKEV | LI litellm BerriAI | 9.8 | May 8 | LiteLLM: SQL injection in Proxy API key verification |
| CVE-2026-42203 | LI litellm BerriAI | 8.8 | May 8 | LiteLLM: Server-Side Template Injection in /prompts/test endpoint |
| CVE-2026-42271 In wildKEV | LI litellm BerriAI | 8.8 | May 8 | LiteLLM: Authenticated command execution via MCP stdio test endpoints |
| CVE-2026-40217 | LI LiteLLM BerriAI | 8.8 | Apr 10 | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI |
| CVE-2026-35030 | LI litellm BerriAI | 9.1 | Apr 6 | LiteLLM has an authentication bypass via OIDC userinfo cache key collision |
| CVE-2026-35029 | LI litellm BerriAI | 8.8 | Apr 6 | LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint |
| CVE-2026-33634 In wildKEV | LI LiteLLM BerriAI | 8.8 | Mar 23 | Trivy ecosystem supply chain briefly compromised |