LiteLLM records

37 published records for vendor litellm.

Researcher profile

Entered KEV: 4 · 10.8%
Weaponized: 4 · 10.8%
Pre-auth RCE: 3
With a fix record: 62.2%
Median publish → KEV: 17 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

37 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
92Now	CVE-2026-42271Weaponized	LiteLLM: Authenticated command execution via MCP stdio test endpointslitellm · litellm · CWE-77 RCE Command injection	High8.7	KEV	92.6%	May 8, 2026
69This week	CVE-2026-42208Weaponized	LiteLLM: SQL injection in Proxy API key verificationlitellm · litellm · CWE-89 Pre-auth SQL injection	Critical9.3	KEV	5.8%	May 8, 2026
68This week	CVE-2026-33634Weaponized	Trivy ecosystem supply chain briefly compromisedaquasec · setup-trivy · CWE-506	Critical9.4	KEV	1.7%	Mar 23, 2026
65This week	CVE-2026-59822Weaponized	LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallbacklitellm · litellm · CWE-287 Pre-auth Auth bypass	High8.8	KEV	0.8%	Jul 8, 2026
41Plan	CVE-2024-6587Proof of concept	SSRF in berriai/litellmlitellm · litellm · CWE-918 Pre-auth SSRF	High7.5	—	35.3%	Sep 13, 2024
39Monitor	CVE-2024-2952No exploit	Server-Side Template Injection in BerriAI/litellmlitellm · litellm · CWE-76 pre-auth RCE SSTI	Critical9.8	—	1.3%	Apr 10, 2024
39Monitor	CVE-2024-5751No exploit	Remote Code Execution in BerriAI/litellmlitellm · litellm · CWE-94 pre-auth RCE	Critical9.8	—	0.9%	Jun 27, 2024
38Monitor	CVE-2026-49468Proof of concept	LiteLLM: Authentication Bypass via Host Header Injectionlitellm · litellm · CWE-290 Pre-auth Auth bypass	Critical9.5	—	0.8%	Jun 22, 2026
37Monitor	CVE-2026-35030Proof of concept	LiteLLM has an authentication bypass via OIDC userinfo cache key collisionlitellm · litellm · CWE-287 Pre-auth Auth bypass	Critical9.4	—	0.9%	Apr 6, 2026
36Monitor	CVE-2026-40217Proof of concept	LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.litellm · litellm · CWE-420 RCE	High8.8	—	3.4%	Apr 10, 2026
35Monitor	CVE-2026-35029Proof of concept	LiteLLM affected by privilege escalation via unrestricted proxy configuration endpointlitellm · litellm · CWE-863 RCE Broken access control (IDOR)	High8.7	—	4.0%	Apr 6, 2026
35Monitor	CVE-2024-6825No exploit	Remote Code Execution in BerriAI/litellmlitellm · litellm · CWE-94 RCE	High8.8	—	1.7%	Mar 20, 2025
34Monitor	CVE-2026-47101Proof of concept	LiteLLM < 1.83.14 Privilege Escalation via API Key Generationlitellm · litellm · CWE-863 Broken access control (IDOR)	High8.7	—	1.3%	May 21, 2026
34Monitor	CVE-2026-47102Proof of concept	LiteLLM < 1.83.10 Privilege Escalation via User Updatelitellm · litellm · CWE-863 Broken access control (IDOR)	High8.7	—	0.8%	May 21, 2026
34Monitor	CVE-2026-42203Proof of concept	LiteLLM: Server-Side Template Injection in /prompts/test endpointlitellm · litellm · CWE-1336 RCE SSTI	High8.6	—	0.7%	May 8, 2026
32Monitor	CVE-2024-4888No exploit	Arbitrary File Deletion in BerriAI/litellmlitellm · litellm · CWE-862 Broken access control (IDOR)	High8.1	—	0.6%	Jun 6, 2024
30Monitor	CVE-2024-8984No exploit	Denial of Service (DoS) in berriai/litellmlitellm · litellm · CWE-770 Pre-auth Denial of service	High7.5	—	0.8%	Mar 20, 2025
30Monitor	CVE-2024-9606No exploit	Improper Output Neutralization for Logs in berriai/litellmlitellm · litellm · CWE-117 Pre-auth	High7.5	—	0.8%	Mar 20, 2025
30Monitor	CVE-2025-0330No exploit	Exposure of Sensitive Information in berriai/litellmlitellm · litellm · CWE-1230 Pre-auth	High7.5	—	0.6%	Mar 20, 2025
28Monitor	CVE-2024-4889No exploit	Code Injection in berriai/litellmlitellm · litellm · CWE-94 RCE	High7.2	—	0.9%	Jun 6, 2024
28Monitor	CVE-2024-5225No exploit	SQL Injection in berriai/litellmlitellm · litellm · CWE-89 SQL injection	High7.2	—	0.4%	Jun 6, 2024
26Monitor	CVE-2024-5710No exploit	Improper Access Control in Team Management in berriai/litellmlitellm · litellm · CWE-862 Broken access control (IDOR)	Medium6.5	—	0.4%	Jun 27, 2024
24Monitor	CVE-2026-59820No exploit	LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')litellm · litellm · CWE-22 Path traversal	Medium6.1	—	0.6%	Jul 8, 2026
22Monitor	CVE-2026-12773No exploit	BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authenticationlitellm · litellm · CWE-287 Pre-auth Auth bypass	Medium5.5	—	1.0%	Jun 21, 2026
22Monitor	CVE-2026-12795No exploit	BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authenticationlitellm · litellm · CWE-287 Pre-auth Auth bypass	Medium5.5	—	0.8%	Jun 21, 2026

CVE-2026-42271
92Now
LiteLLM: Authenticated command execution via MCP stdio test endpoints
HighCVSS 8.7KEVWeaponizedEPSS 93%
- RCE
- Command injection
litellm · litellmMay 8, 2026
CVE-2026-42208
69This week
LiteLLM: SQL injection in Proxy API key verification
CriticalCVSS 9.3KEVWeaponizedEPSS 6%
- Pre-auth
- SQL injection
litellm · litellmMay 8, 2026
CVE-2026-33634
68This week
Trivy ecosystem supply chain briefly compromised
CriticalCVSS 9.4KEVWeaponizedEPSS 2%
aquasec · setup-trivyMar 23, 2026
CVE-2026-59822
65This week
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
HighCVSS 8.8KEVWeaponizedEPSS 1%
- Pre-auth
- Auth bypass
litellm · litellmJul 8, 2026
CVE-2024-6587
41Plan
SSRF in berriai/litellm
HighCVSS 7.5Proof of conceptEPSS 35%
- Pre-auth
- SSRF
litellm · litellmSep 13, 2024
CVE-2024-2952
39Monitor
Server-Side Template Injection in BerriAI/litellm
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- SSTI
litellm · litellmApr 10, 2024
CVE-2024-5751
39Monitor
Remote Code Execution in BerriAI/litellm
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
litellm · litellmJun 27, 2024
CVE-2026-49468
38Monitor
LiteLLM: Authentication Bypass via Host Header Injection
CriticalCVSS 9.5Proof of conceptEPSS 1%
- Pre-auth
- Auth bypass
litellm · litellmJun 22, 2026
CVE-2026-35030
37Monitor
LiteLLM has an authentication bypass via OIDC userinfo cache key collision
CriticalCVSS 9.4Proof of conceptEPSS 1%
- Pre-auth
- Auth bypass
litellm · litellmApr 6, 2026
CVE-2026-40217
36Monitor
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
HighCVSS 8.8Proof of conceptEPSS 3%
- RCE
litellm · litellmApr 10, 2026
CVE-2026-35029
35Monitor
LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint
HighCVSS 8.7Proof of conceptEPSS 4%
- RCE
- Broken access control (IDOR)
litellm · litellmApr 6, 2026
CVE-2024-6825
35Monitor
Remote Code Execution in BerriAI/litellm
HighCVSS 8.8No exploitEPSS 2%
- RCE
litellm · litellmMar 20, 2025
CVE-2026-47101
34Monitor
LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
HighCVSS 8.7Proof of conceptEPSS 1%
- Broken access control (IDOR)
litellm · litellmMay 21, 2026
CVE-2026-47102
34Monitor
LiteLLM < 1.83.10 Privilege Escalation via User Update
HighCVSS 8.7Proof of conceptEPSS 1%
- Broken access control (IDOR)
litellm · litellmMay 21, 2026
CVE-2026-42203
34Monitor
LiteLLM: Server-Side Template Injection in /prompts/test endpoint
HighCVSS 8.6Proof of conceptEPSS 1%
- RCE
- SSTI
litellm · litellmMay 8, 2026
CVE-2024-4888
32Monitor
Arbitrary File Deletion in BerriAI/litellm
HighCVSS 8.1No exploitEPSS 1%
- Broken access control (IDOR)
litellm · litellmJun 6, 2024
CVE-2024-8984
30Monitor
Denial of Service (DoS) in berriai/litellm
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
litellm · litellmMar 20, 2025
CVE-2024-9606
30Monitor
Improper Output Neutralization for Logs in berriai/litellm
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
litellm · litellmMar 20, 2025
CVE-2025-0330
30Monitor
Exposure of Sensitive Information in berriai/litellm
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
litellm · litellmMar 20, 2025
CVE-2024-4889
28Monitor
Code Injection in berriai/litellm
HighCVSS 7.2No exploitEPSS 1%
- RCE
litellm · litellmJun 6, 2024
CVE-2024-5225
28Monitor
SQL Injection in berriai/litellm
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
litellm · litellmJun 6, 2024
CVE-2024-5710
26Monitor
Improper Access Control in Team Management in berriai/litellm
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
litellm · litellmJun 27, 2024
CVE-2026-59820
24Monitor
LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
MediumCVSS 6.1No exploitEPSS 1%
- Path traversal
litellm · litellmJul 8, 2026
CVE-2026-12773
22Monitor
BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
MediumCVSS 5.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
litellm · litellmJun 21, 2026
CVE-2026-12795
22Monitor
BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication
MediumCVSS 5.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
litellm · litellmJun 21, 2026