Read the docs

BerriAI

Records48All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

BerriAI records in CISA KEV
TI-2026-42639 BerriAI LiteLLM Improper Authentication Vulnerability Priority CRITICAL 95KEV 2026-09-02TI-2026-30582 BerriAI LiteLLM Command Injection Vulnerability Priority CRITICAL 97KEV 2026-06-08TI-2026-30529 BerriAI LiteLLM SQL Injection Vulnerability Priority CRITICAL 99KEV 2026-05-08TI-2026-26015 Aquasecurity Trivy Embedded Malicious Code Vulnerability Priority CRITICAL 100KEV 2026-03-26

Components

Products in the NVD configurations · select one to filter the records
Litellm 37 records CRITICAL

Records

37 records in Litellm · all components

TI-2026-30529 CVE-2026-42208 · GHSA-r75f-5x8p-qvmc

LiteLLM: SQL injection in Proxy API key verification

Priority CRITICAL 99KEV

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.8942 Published 2026-05-08 Fixed in 1.83.7 CWE-89
TI-2024-05340 CVE-2024-5751 · GHSA-gppg-gqw8-wh9g

Remote Code Execution in BerriAI/litellm

Priority HIGH 82

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00882 Published 2024-06-27 Fixed in 1.40.16 CWE-94
TI-2024-02760 CVE-2024-2952 · GHSA-46cm-pfwv-cgf8

Server-Side Template Injection in BerriAI/litellm

Priority HIGH 82

BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01267 Published 2024-04-10 Fixed in 1.34.42 CWE-76
TI-2026-34701 CVE-2026-47102 · GHSA-wpfp-gwwc-vwq6

LiteLLM < 1.83.10 Privilege Escalation via User Update

Priority HIGH 73

LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00654 Published 2026-05-21 Partial fix · 1.83.10 CWE-863
TI-2026-34700 CVE-2026-47101 · GHSA-qrc4-49gv-mv9m

LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

Priority HIGH 73

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01185 Published 2026-05-21 Partial fix · 1.83.14 CWE-863
TI-2024-06328 CVE-2024-6825 · GHSA-53gh-p8jc-7rg8

Remote Code Execution in BerriAI/litellm

Priority HIGH 73

BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0165 Published 2025-03-20 Fixed in v1.65.4.dev6 CWE-94
TI-2025-00265 CVE-2025-0330 · GHSA-879v-fggm-vxw2

Exposure of Sensitive Information in berriai/litellm

Priority HIGH 72

In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00566 Published 2025-03-20 No fix listed CWE-1230
TI-2024-08911 CVE-2024-9606 · GHSA-g5pg-73fc-hjwq

Improper Output Neutralization for Logs in berriai/litellm

Priority HIGH 72

In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00767 Published 2025-03-20 Fixed in 1.44.12 CWE-117
TI-2024-08342 CVE-2024-8984 · GHSA-fh2c-86xm-pm2x

Denial of Service (DoS) in berriai/litellm

Priority HIGH 72

A Denial of Service (DoS) vulnerability exists in berriai/litellm version v1.44.5.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00857 Published 2025-03-20 Fixed in v1.65.4-stable, 1.56.2 CWE-770
TI-2024-04544 CVE-2024-4888 · GHSA-3xr8-qfvj-9p9j

Arbitrary File Deletion in BerriAI/litellm

Priority HIGH 68

BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00619 Published 2024-06-06 Fixed in 1.35.36 CWE-862
TI-2024-04849 CVE-2024-5225 · GHSA-h6m6-jj8v-94jj

SQL Injection in berriai/litellm

Priority HIGH 67

An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00429 Published 2024-06-06 Fixed in 1.40.0 CWE-89
TI-2024-06109 CVE-2024-6587 · GHSA-g26j-5385-hhw3

SSRF in berriai/litellm

Priority HIGH 66

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.34375 Published 2024-09-13 Fixed in 1.44.9, 1.44.8 CWE-918
TI-2024-05304 CVE-2024-5710 · GHSA-qqcv-vg9f-5rr3

Improper Access Control in Team Management in berriai/litellm

Priority MEDIUM 62

berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00406 Published 2024-06-27 Fixed in 1.40.15 CWE-862
Load more
Open these records in search →