openlit

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

openlit records in CISA KEV

No openlit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openlit Software Development Kit 1 record HIGH

Records

2 records

TI-2026-22285 CVE-2026-27941

OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of…

HIGH 76

OpenLIT is an open source platform for AI engineering.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00454 Published 2026-02-26 Fixed in 1.37.1 CWE-829

TI-2026-70580 CVE-2026-108596 · GHSA-fx43-jvpp-9x44

Authorization bypass in OpenLIT exposes other projects' telemetry

LOW 27

OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00304 Published 2026-10-10 No fix listed CWE-639

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0