LiteLLM
Filed as: litellm
Newest record 2026-10-27 · 48 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 6
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- closedLiteLLM LiteLLM Master Key Leak Leads to Malicious Package Release
Exploited · since 24 Oct 2026 · updated 26 Oct 2026
AI - closedLiteLLM LiteLLM 1.107.0 compromised via malicious Python startup hooks
Exploited · since 23 Oct 2026
AI - closedLiteLLM LiteLLM release pipeline compromised to distribute info-stealer malware
Exploited · since 22 Oct 2026
AI - closedLiteLLM LiteLLM Package Compromised in Supply Chain Incident via Release Pipeline
Exploited · since 21 Oct 2026
AI - closedLiteLLM LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer
Exploited · since 21 Oct 2026 · updated 27 Oct 2026
AI - closedLiteLLM LiteLLM Releases Contain Credential Harvesting Malware
Exploited · since 25 Mar 2026
AI
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 52
- closed8.1LiteLLM LiteLLM: internal_user_viewer arbitrary local file read via vertex_ai_credentials
Disclosed · since 27 Oct 2026
AI - closed6.8LiteLLM LiteLLM reflected XSS vulnerability in /sso/debug/callback
Disclosed · since 27 Oct 2026
AI - closed9.9LiteLLM CVE-2026-114612: LiteLLM vulnerable to privilege escalation via cryptographic context reuse
Disclosed · Patched · since 22 Oct 2026 · updated 27 Oct 2026 · CVE-2026-114612
AI - closed6.3LiteLLM CVE-2026-108575: Improper authorization flaw in BerriAI LiteLLM secret resolution
Disclosed · since 11 Oct 2026 · CVE-2026-108575
AI - closed4.3LiteLLM CVE-2026-108574: Authorization bypass flaw in BerriAI LiteLLM
Disclosed · since 11 Oct 2026 · CVE-2026-108574
AI - closed8.1LiteLLM CVE-2026-93355: LiteLLM Weak JWT Authentication Vulnerability
Disclosed · since 28 Sep 2026 · CVE-2026-93355
AI - closed8.7LiteLLM CVE-2026-89032: BerriAI LiteLLM semantic cache tenant isolation bypass
Disclosed · since 25 Sep 2026 · CVE-2026-89032
AI - closed5.3LiteLLM LiteLLM Proxy Bypass Allows Server-Side Request Redirection
Disclosed · since 16 Sep 2026 · updated 17 Sep 2026 · CVE-2026-59823
AI - closed6.5LiteLLM CVE-2026-84377: LiteLLM Authenticated SSRF and Credential Exfiltration
Disclosed · since 30 Sep 2026 · updated 30 Sep 2026 · CVE-2026-84377
AI - closed9.8LiteLLM CVE-2026-37004: LiteLLM server-side template injection in the test endpoint
Disclosed · since 27 Aug 2026 · CVE-2026-37004
AI - closed9.8LiteLLM CVE-2026-30623: Remote code execution vulnerability in LiteLLM
Disclosed · since 15 Jul 2026 · CVE-2026-30623
AI - closed2.1LiteLLM CVE-2026-59819: LiteLLM Local File Read Vulnerability
Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59819
AI - closed2.1LiteLLM CVE-2026-59821: LiteLLM Custom Code Guardrails Bypass Sandboxing
Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59821
AI - closed6.1LiteLLM CVE-2026-59820: LiteLLM Arbitrary File Write via Skills Archive
Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59820
AI - closed8.8LiteLLM CVE-2026-59822: LiteLLM MCP authentication bypass via OAuth2 fallback
Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59822
AI - closed6.3LiteLLM CVE-2026-12774: SSRF vulnerability in BerriAI LiteLLM MCP server
Disclosed · since 21 Jun 2026 · CVE-2026-12774
AI - closed7.3LiteLLM CVE-2026-12795: LiteLLM SSO Debug Flow Authentication Bypass Vulnerability
Disclosed · since 21 Jun 2026 · CVE-2026-12795
AI - closed5.4LiteLLM CVE-2026-12770: LiteLLM Admin Key Handler Improper Authorization Vulnerability
Disclosed · since 21 Jun 2026 · CVE-2026-12770
AI - closed6.3LiteLLM CVE-2026-12796: BerriAI LiteLLM SSO Login Fails to Invalidate Previous Session Tokens
Disclosed · since 21 Jun 2026 · CVE-2026-12796
AI - closed6.3LiteLLM CVE-2026-12772: LiteLLM API Key Generator Has Insufficient Session Expiration
Disclosed · since 21 Jun 2026 · CVE-2026-12772
AI - closed7.3LiteLLM CVE-2026-12773: LiteLLM MCP Proxy Has Improper Authentication
Disclosed · since 21 Jun 2026 · CVE-2026-12773
AI - closed6.3LiteLLM CVE-2026-12797: LiteLLM Has Security Feature Bypass in Guardrails
Disclosed · since 21 Jun 2026 · CVE-2026-12797
AI - closed4.3LiteLLM CVE-2026-12799: LiteLLM UI User Enumeration Leads to Information Disclosure
Disclosed · since 21 Jun 2026 · CVE-2026-12799
AI - closed5.0LiteLLM CVE-2026-12771: LiteLLM M2M JWT Handler Has Improper Authorization
Disclosed · since 21 Jun 2026 · CVE-2026-12771
AI - closed6.3LiteLLM CVE-2026-12798: BerriAI litellm SSRF via spec_path URL loader
Disclosed · since 21 Jun 2026 · CVE-2026-12798
AI - closed9.8LiteLLM CVE-2026-49468: LiteLLM Authentication Bypass via Host Header Injection
Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-49468
AI - closed8.8LiteLLM LiteLLM API Key Generation Flaw Allows Unauthorized Route Access
Disclosed · since 21 May 2026 · CVE-2026-47101
AI - closed8.8LiteLLM LiteLLM User Role Update Vulnerability Enables Privilege Escalation
Disclosed · since 21 May 2026 · CVE-2026-47102
AI - closed8.8LiteLLM CVE-2026-42271: LiteLLM Authenticated Command Execution via MCP Endpoints
Disclosed · since 25 Apr 2026 · updated 8 May 2026 · CVE-2026-42271
AI - closed8.6LiteLLM CVE-2026-42203: LiteLLM Server-Side Template Injection
Disclosed · since 24 Apr 2026 · updated 8 May 2026 · CVE-2026-42203
AI - closed9.8LiteLLM CVE-2026-42208: LiteLLM proxy API key verification SQL injection
Disclosed · since 24 Apr 2026 · updated 8 May 2026 · CVE-2026-42208
AI - closed8.8LiteLLM CVE-2026-40217: LiteLLM sandbox escape in custom-code guardrail
Disclosed · since 11 May 2026 · updated 11 May 2026 · CVE-2026-40217
AI - closedLiteLLM LiteLLM sandbox escape vulnerability in custom-code guardrail
Disclosed · since 10 Apr 2026
AI - closedLiteLLM LiteLLM authentication bypass and password hash exposure
Disclosed · since 8 Apr 2026
AI - closed9.4LiteLLM CVE-2026-35030: LiteLLM authentication bypass via OIDC cache collision
Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-35030
AI - closed8.7LiteLLM CVE-2026-35029: LiteLLM proxy configuration endpoint privilege escalation
Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-35029
AI - closed3.5LiteLLM CVE-2025-11203: LiteLLM information disclosure vulnerability in health endpoint
Disclosed · since 29 Oct 2025 · CVE-2025-11203
AI - closed5.4LiteLLM CVE-2025-45809: SQL injection vulnerability in BerriAI LiteLLM
Disclosed · since 3 Jul 2025 · CVE-2025-45809
AI - closed7.5LiteLLM CVE-2024-10188: LiteLLM Vulnerable to Denial of Service
Disclosed · since 20 Mar 2025 · CVE-2024-10188
AI - closed7.5LiteLLM CVE-2025-0330: LiteLLM Langfuse API Key Leakage
Disclosed · since 20 Mar 2025 · CVE-2025-0330
AI - closed7.5LiteLLM CVE-2024-9606: LiteLLM reveals portion of API key via logging file
Disclosed · since 20 Mar 2025 · CVE-2024-9606
AI - closed7.5LiteLLM CVE-2024-8984: LiteLLM Denial of Service via Crafted HTTP Request
Disclosed · since 20 Mar 2025 · CVE-2024-8984
AI - closed8.1LiteLLM CVE-2025-0628: LiteLLM Improper Authorization and Privilege Escalation
Disclosed · since 20 Mar 2025 · CVE-2025-0628
AI - closed8.8LiteLLM CVE-2024-6825: LiteLLM Vulnerable to Remote Code Execution via Rules
Disclosed · since 20 Mar 2025 · CVE-2024-6825
AI - closed8.7LiteLLM CVE-2024-6587: LiteLLM Server-Side Request Forgery vulnerability
Disclosed · since 13 Sep 2024 · CVE-2024-6587
AI - closed5.3LiteLLM CVE-2024-5710: Improper access control in litellm team management
Disclosed · since 27 Jun 2024 · CVE-2024-5710
AI - closed9.8LiteLLM CVE-2024-5751: Remote code execution in litellm
Disclosed · since 27 Jun 2024 · CVE-2024-5751
AI - closed4.9LiteLLM CVE-2024-4890: SQL Injection Vulnerability in LiteLLM
Disclosed · since 6 Jun 2024 · CVE-2024-4890
AI - closed7.0LiteLLM CVE-2024-4888: Arbitrary File Deletion in LiteLLM
Disclosed · since 6 Jun 2024 · CVE-2024-4888
AI - closed6.4LiteLLM CVE-2024-5225: SQL Injection Vulnerability in LiteLLM
Disclosed · since 6 Jun 2024 · CVE-2024-5225
AI - closed7.2LiteLLM CVE-2024-4264: LiteLLM Unsafe Eval Remote Code Execution
Disclosed · since 18 May 2024 · CVE-2024-4264
AI - closed9.8LiteLLM LiteLLM Server-Side Template Injection in Completions Endpoint
Disclosed · since 10 Apr 2024 · CVE-2024-2952
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.