LiteLLM kayıtları
litellm üreticisine ait 37 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 4 · %10,8
- Silahlaştırılmış
- 4 · %10,8
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %62,2
- Yayından KEV’e ortanca
- 17 gün
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-287 Improper Authentication4
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
- CWE-918 Server-Side Request Forgery (SSRF)3
- CWE-266 Incorrect Privilege Assignment3
- CWE-863 Incorrect Authorization3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
37 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
92Hemen | CVE-2026-42271Silahlaştırılmış | LiteLLM: Authenticated command execution via MCP stdio test endpointslitellm · litellm · CWE-77 | Yüksek8,7 | KEV | %92,6 | 8 May 2026 |
69Bu hafta | CVE-2026-42208Silahlaştırılmış | LiteLLM: SQL injection in Proxy API key verificationlitellm · litellm · CWE-89 | Kritik9,3 | KEV | %5,8 | 8 May 2026 |
68Bu hafta | CVE-2026-33634Silahlaştırılmış | Trivy ecosystem supply chain briefly compromisedaquasec · setup-trivy · CWE-506 | Kritik9,4 | KEV | %1,7 | 23 Mar 2026 |
65Bu hafta | CVE-2026-59822Silahlaştırılmış | LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallbacklitellm · litellm · CWE-287 | Yüksek8,8 | KEV | %0,8 | 8 Tem 2026 |
41Planlayın | CVE-2024-6587Kavram kanıtı | SSRF in berriai/litellmlitellm · litellm · CWE-918 | Yüksek7,5 | — | %35,3 | 13 Eyl 2024 |
39İzleyin | CVE-2024-2952İstismar yok | Server-Side Template Injection in BerriAI/litellmlitellm · litellm · CWE-76 | Kritik9,8 | — | %1,3 | 10 Nis 2024 |
39İzleyin | CVE-2024-5751İstismar yok | Remote Code Execution in BerriAI/litellmlitellm · litellm · CWE-94 | Kritik9,8 | — | %0,9 | 27 Haz 2024 |
38İzleyin | CVE-2026-49468Kavram kanıtı | LiteLLM: Authentication Bypass via Host Header Injectionlitellm · litellm · CWE-290 | Kritik9,5 | — | %0,8 | 22 Haz 2026 |
37İzleyin | CVE-2026-35030Kavram kanıtı | LiteLLM has an authentication bypass via OIDC userinfo cache key collisionlitellm · litellm · CWE-287 | Kritik9,4 | — | %0,9 | 6 Nis 2026 |
36İzleyin | CVE-2026-40217Kavram kanıtı | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.litellm · litellm · CWE-420 | Yüksek8,8 | — | %3,4 | 10 Nis 2026 |
35İzleyin | CVE-2026-35029Kavram kanıtı | LiteLLM affected by privilege escalation via unrestricted proxy configuration endpointlitellm · litellm · CWE-863 | Yüksek8,7 | — | %4,0 | 6 Nis 2026 |
35İzleyin | CVE-2024-6825İstismar yok | Remote Code Execution in BerriAI/litellmlitellm · litellm · CWE-94 | Yüksek8,8 | — | %1,7 | 20 Mar 2025 |
34İzleyin | CVE-2026-47101Kavram kanıtı | LiteLLM < 1.83.14 Privilege Escalation via API Key Generationlitellm · litellm · CWE-863 | Yüksek8,7 | — | %1,3 | 21 May 2026 |
34İzleyin | CVE-2026-47102Kavram kanıtı | LiteLLM < 1.83.10 Privilege Escalation via User Updatelitellm · litellm · CWE-863 | Yüksek8,7 | — | %0,8 | 21 May 2026 |
34İzleyin | CVE-2026-42203Kavram kanıtı | LiteLLM: Server-Side Template Injection in /prompts/test endpointlitellm · litellm · CWE-1336 | Yüksek8,6 | — | %0,7 | 8 May 2026 |
32İzleyin | CVE-2024-4888İstismar yok | Arbitrary File Deletion in BerriAI/litellmlitellm · litellm · CWE-862 | Yüksek8,1 | — | %0,6 | 6 Haz 2024 |
30İzleyin | CVE-2024-8984İstismar yok | Denial of Service (DoS) in berriai/litellmlitellm · litellm · CWE-770 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2024-9606İstismar yok | Improper Output Neutralization for Logs in berriai/litellmlitellm · litellm · CWE-117 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2025-0330İstismar yok | Exposure of Sensitive Information in berriai/litellmlitellm · litellm · CWE-1230 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
28İzleyin | CVE-2024-4889İstismar yok | Code Injection in berriai/litellmlitellm · litellm · CWE-94 | Yüksek7,2 | — | %0,9 | 6 Haz 2024 |
28İzleyin | CVE-2024-5225İstismar yok | SQL Injection in berriai/litellmlitellm · litellm · CWE-89 | Yüksek7,2 | — | %0,4 | 6 Haz 2024 |
26İzleyin | CVE-2024-5710İstismar yok | Improper Access Control in Team Management in berriai/litellmlitellm · litellm · CWE-862 | Orta6,5 | — | %0,4 | 27 Haz 2024 |
24İzleyin | CVE-2026-59820İstismar yok | LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')litellm · litellm · CWE-22 | Orta6,1 | — | %0,6 | 8 Tem 2026 |
22İzleyin | CVE-2026-12773İstismar yok | BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authenticationlitellm · litellm · CWE-287 | Orta5,5 | — | %1,0 | 21 Haz 2026 |
22İzleyin | CVE-2026-12795İstismar yok | BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authenticationlitellm · litellm · CWE-287 | Orta5,5 | — | %0,8 | 21 Haz 2026 |
- CVE-2026-4227192Hemen
LiteLLM: Authenticated command execution via MCP stdio test endpoints
YüksekCVSS 8,7KEVSilahlaştırılmışEPSS %93litellm · litellm8 May 2026
- CVE-2026-4220869Bu hafta
LiteLLM: SQL injection in Proxy API key verification
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %6litellm · litellm8 May 2026
- CVE-2026-3363468Bu hafta
Trivy ecosystem supply chain briefly compromised
KritikCVSS 9,4KEVSilahlaştırılmışEPSS %2aquasec · setup-trivy23 Mar 2026
- CVE-2026-5982265Bu hafta
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %1litellm · litellm8 Tem 2026
- CVE-2024-658741Planlayın
SSRF in berriai/litellm
YüksekCVSS 7,5Kavram kanıtıEPSS %35litellm · litellm13 Eyl 2024
- CVE-2024-295239İzleyin
Server-Side Template Injection in BerriAI/litellm
KritikCVSS 9,8İstismar yokEPSS %1litellm · litellm10 Nis 2024
- CVE-2024-575139İzleyin
Remote Code Execution in BerriAI/litellm
KritikCVSS 9,8İstismar yokEPSS %1litellm · litellm27 Haz 2024
- CVE-2026-4946838İzleyin
LiteLLM: Authentication Bypass via Host Header Injection
KritikCVSS 9,5Kavram kanıtıEPSS %1litellm · litellm22 Haz 2026
- CVE-2026-3503037İzleyin
LiteLLM has an authentication bypass via OIDC userinfo cache key collision
KritikCVSS 9,4Kavram kanıtıEPSS %1litellm · litellm6 Nis 2026
- CVE-2026-4021736İzleyin
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
YüksekCVSS 8,8Kavram kanıtıEPSS %3litellm · litellm10 Nis 2026
- CVE-2026-3502935İzleyin
LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint
YüksekCVSS 8,7Kavram kanıtıEPSS %4litellm · litellm6 Nis 2026
- CVE-2024-682535İzleyin
Remote Code Execution in BerriAI/litellm
YüksekCVSS 8,8İstismar yokEPSS %2litellm · litellm20 Mar 2025
- CVE-2026-4710134İzleyin
LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
YüksekCVSS 8,7Kavram kanıtıEPSS %1litellm · litellm21 May 2026
- CVE-2026-4710234İzleyin
LiteLLM < 1.83.10 Privilege Escalation via User Update
YüksekCVSS 8,7Kavram kanıtıEPSS %1litellm · litellm21 May 2026
- CVE-2026-4220334İzleyin
LiteLLM: Server-Side Template Injection in /prompts/test endpoint
YüksekCVSS 8,6Kavram kanıtıEPSS %1litellm · litellm8 May 2026
- CVE-2024-488832İzleyin
Arbitrary File Deletion in BerriAI/litellm
YüksekCVSS 8,1İstismar yokEPSS %1litellm · litellm6 Haz 2024
- CVE-2024-898430İzleyin
Denial of Service (DoS) in berriai/litellm
YüksekCVSS 7,5İstismar yokEPSS %1litellm · litellm20 Mar 2025
- CVE-2024-960630İzleyin
Improper Output Neutralization for Logs in berriai/litellm
YüksekCVSS 7,5İstismar yokEPSS %1litellm · litellm20 Mar 2025
- CVE-2025-033030İzleyin
Exposure of Sensitive Information in berriai/litellm
YüksekCVSS 7,5İstismar yokEPSS %1litellm · litellm20 Mar 2025
- CVE-2024-488928İzleyin
Code Injection in berriai/litellm
YüksekCVSS 7,2İstismar yokEPSS %1litellm · litellm6 Haz 2024
- CVE-2024-522528İzleyin
SQL Injection in berriai/litellm
YüksekCVSS 7,2İstismar yokEPSS %0litellm · litellm6 Haz 2024
- CVE-2024-571026İzleyin
Improper Access Control in Team Management in berriai/litellm
OrtaCVSS 6,5İstismar yokEPSS %0litellm · litellm27 Haz 2024
- CVE-2026-5982024İzleyin
LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
OrtaCVSS 6,1İstismar yokEPSS %1litellm · litellm8 Tem 2026
- CVE-2026-1277322İzleyin
BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
OrtaCVSS 5,5İstismar yokEPSS %1litellm · litellm21 Haz 2026
- CVE-2026-1279522İzleyin
BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication
OrtaCVSS 5,5İstismar yokEPSS %1litellm · litellm21 Haz 2026