Vulnerabilities

TI-2026-79419 CVE-2026-114612 · GHSA-7hp6-4w63-5g45

Privilege escalation to proxy admin in LiteLLM via reused salt key

MEDIUM 43

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00319 Published 2026-10-22 Fixed in 1.100.4, 1.101.3 +4 CWE-269

TI-2026-70563 CVE-2026-108575 · GHSA-gw95-8pcg-7gvv

Improper authorization in BerriAI LiteLLM secret resolution

MEDIUM 57

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00201 Published 2026-10-11 Fix deferred CWE-266

TI-2026-70562 CVE-2026-108574 · GHSA-wxjw-vcvf-mvw9

Authorization bypass in BerriAI LiteLLM spend log viewing

MEDIUM 57

A flaw has been found in BerriAI LiteLLM up to 1.95.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00238 Published 2026-10-11 Partial fix · 1.96.0 CWE-285

TI-2026-62943 CVE-2026-93355 · GHSA-g83g-3c4g-cfm5

LiteLLM Weak JWT Authentication via Email-Based User Lookup

HIGH 68

LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00273 Published 2026-09-28 Partial fix CWE-1390

TI-2026-60341 CVE-2026-89032 · GHSA-237m-2qxv-ww7c

BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer

LOW 39

BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismat…

CVSS 4.0HIGH 8.7 Network Low privileges User interaction EPSS 0.00272 Published 2026-09-25 Partial fix · 1.101.0-rc.1 CWE-863

TI-2026-42640 CVE-2026-59823 · GHSA-hx8v-g79f-8w5f

LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy

LOW 24

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00439 Published 2026-09-16 Partial fix · 1.83.9 CWE-918

TI-2026-57988 CVE-2026-84377 · GHSA-3cv6-jpf6-8222

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

LOW 30

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0054 Published 2026-09-02 Partial fix · 1.88.6, 1.96.2 +7 CWE-918

TI-2026-42636 CVE-2026-59819 · GHSA-4g5m-c9r5-49xf

LiteLLM: Local file read via request-supplied OIDC file references

LOW 12

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00572 Published 2026-07-08 Fixed in 1.83.10-stable, 1.83.10 CWE-73

TI-2026-42639 CVE-2026-59822 · GHSA-7488-6r32-c95q

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

CRITICAL 95KEV

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00836 Published 2026-07-08 Fixed in 1.84.0 CWE-287

TI-2026-42637 CVE-2026-59820 · GHSA-5jmr-gcrj-2c9q

LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

LOW 30

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00587 Published 2026-07-08 Partial fix · 1.83.7-stable, 1.83.7 CWE-22

TI-2026-42638 CVE-2026-59821 · GHSA-72m8-9m7m-h278

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

LOW 13

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00904 Published 2026-07-08 Fixed in 1.82.0-stable, 1.82.0 CWE-94

TI-2026-36623 CVE-2026-49468 · GHSA-4xpc-pv4p-pm3w

LiteLLM: Authentication Bypass via Host Header Injection

MEDIUM 54

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.03033 Published 2026-06-22 Partial fix · 1.84.0 CWE-290

TI-2026-10937 CVE-2026-12799 · GHSA-m2v5-74w2-qhcj

BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization

MEDIUM 57

A security vulnerability has been detected in BerriAI litellm up to 1.82.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00426 Published 2026-06-21 Fix deferred CWE-266

TI-2026-10936 CVE-2026-12798 · GHSA-c693-x898-5g4h

BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery

MEDIUM 57

A weakness has been identified in BerriAI litellm up to 1.82.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2026-06-21 Fix deferred CWE-918

TI-2026-10935 CVE-2026-12797 · GHSA-p897-vf7j-f5h8

BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization

MEDIUM 57

A security flaw has been discovered in BerriAI litellm up to 1.82.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2026-06-21 Fix deferred CWE-285

TI-2026-10934 CVE-2026-12796 · GHSA-w2mh-qq9q-453x

BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration

MEDIUM 57

A vulnerability was identified in BerriAI litellm up to 1.82.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0057 Published 2026-06-21 Fix deferred CWE-613

TI-2026-10933 CVE-2026-12795 · GHSA-j37q-q7p9-vpwm

BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication

HIGH 70

A vulnerability was determined in BerriAI litellm up to 1.82.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00795 Published 2026-06-21 No fix listed CWE-287

TI-2026-10919 CVE-2026-12774 · GHSA-h9c7-cfj6-h8j6

BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery

MEDIUM 57

A security vulnerability has been detected in BerriAI litellm up to 1.82.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2026-06-21 Fix deferred CWE-918

TI-2026-10918 CVE-2026-12773 · GHSA-4jcj-7x88-m979

BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

HIGH 70

A weakness has been identified in BerriAI litellm up to 1.59.8.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01017 Published 2026-06-21 Partial fix · 1.84.0 CWE-287

TI-2026-10917 CVE-2026-12772 · GHSA-mf52-j94g-746m

BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration

MEDIUM 57

A security flaw has been discovered in BerriAI litellm up to 1.82.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2026-06-21 Fix deferred CWE-613

TI-2026-10916 CVE-2026-12771 · GHSA-qmf3-4767-5fg3

BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

MEDIUM 45

A vulnerability was identified in BerriAI litellm up to 1.82.2.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00431 Published 2026-06-21 No fix listed CWE-266

TI-2026-10915 CVE-2026-12770 · GHSA-6qr3-3g89-m4jj

BerriAI litellm Admin Key key_management_endpoints.py improper authorization

MEDIUM 57

A vulnerability was determined in BerriAI litellm up to 1.63.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00569 Published 2026-06-21 No fix listed CWE-266

TI-2026-34701 CVE-2026-47102 · GHSA-wpfp-gwwc-vwq6

LiteLLM < 1.83.10 Privilege Escalation via User Update

HIGH 73

LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00654 Published 2026-05-21 Partial fix · 1.83.10 CWE-863

TI-2026-34700 CVE-2026-47101 · GHSA-qrc4-49gv-mv9m

LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

HIGH 73

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01185 Published 2026-05-21 Partial fix · 1.83.14 CWE-863

TI-2026-30529 CVE-2026-42208 · GHSA-r75f-5x8p-qvmc

LiteLLM: SQL injection in Proxy API key verification

CRITICAL 99KEV

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.8942 Published 2026-05-08 Fixed in 1.83.7 CWE-89

Vulnerabilities

Filters