litellm
0 live · 37 on record · last incident 18 days ago
Records37
- closed8.1LiteLLM LiteLLM: internal_user_viewer arbitrary local file read via vertex_ai_credentials
Patch now · Disclosed · since 27 Oct 2026
AI - closed6.8LiteLLM LiteLLM reflected XSS vulnerability in /sso/debug/callback
Patch now · Disclosed · since 27 Oct 2026
AI - closedLiteLLM LiteLLM Master Key Leak Leads to Malicious Package Release
Supply chain · Exploited · since 24 Oct 2026 · updated 26 Oct 2026
AI - closedLiteLLM LiteLLM 1.107.0 compromised via malicious Python startup hooks
Supply chain · Exploited · since 23 Oct 2026
AI - closedLiteLLM LiteLLM release pipeline compromised to distribute info-stealer malware
Supply chain · Exploited · since 22 Oct 2026
AI - closed9.9LiteLLM CVE-2026-114612: LiteLLM vulnerable to privilege escalation via cryptographic context reuse
Patch now · Disclosed · Patched · since 22 Oct 2026 · updated 27 Oct 2026 · CVE-2026-114612
AI - closedLiteLLM LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer
Supply chain · Exploited · since 21 Oct 2026 · updated 27 Oct 2026
AI - closed6.3LiteLLM CVE-2026-108575: Improper authorization flaw in BerriAI LiteLLM secret resolution
Patch now · Disclosed · since 11 Oct 2026 · CVE-2026-108575
AI - closed4.3LiteLLM CVE-2026-108574: Authorization bypass flaw in BerriAI LiteLLM
Patch now · Disclosed · since 11 Oct 2026 · CVE-2026-108574
AI - closed8.1LiteLLM CVE-2026-93355: LiteLLM Weak JWT Authentication Vulnerability
Patch now · Disclosed · since 28 Sep 2026 · CVE-2026-93355
AI - closed8.7LiteLLM CVE-2026-89032: BerriAI LiteLLM semantic cache tenant isolation bypass
Patch now · Disclosed · since 25 Sep 2026 · CVE-2026-89032
AI - closed5.3LiteLLM LiteLLM Proxy Bypass Allows Server-Side Request Redirection
Patch now · Disclosed · since 16 Sep 2026 · updated 17 Sep 2026 · CVE-2026-59823
AI - closed6.5LiteLLM CVE-2026-84377: LiteLLM Authenticated SSRF and Credential Exfiltration
Patch now · Disclosed · since 30 Sep 2026 · updated 30 Sep 2026 · CVE-2026-84377
AI - closed9.8LiteLLM CVE-2026-37004: LiteLLM server-side template injection in the test endpoint
Patch now · Disclosed · since 27 Aug 2026 · CVE-2026-37004
AI - closed2.1LiteLLM CVE-2026-59819: LiteLLM Local File Read Vulnerability
Patch now · Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59819
AI - closed2.1LiteLLM CVE-2026-59821: LiteLLM Custom Code Guardrails Bypass Sandboxing
Patch now · Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59821
AI - closed6.1LiteLLM CVE-2026-59820: LiteLLM Arbitrary File Write via Skills Archive
Patch now · Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59820
AI - closed7.3LiteLLM CVE-2026-12795: LiteLLM SSO Debug Flow Authentication Bypass Vulnerability
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12795
AI - closed5.4LiteLLM CVE-2026-12770: LiteLLM Admin Key Handler Improper Authorization Vulnerability
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12770
AI - closed6.3LiteLLM CVE-2026-12796: BerriAI LiteLLM SSO Login Fails to Invalidate Previous Session Tokens
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12796
AI - closed6.3LiteLLM CVE-2026-12772: LiteLLM API Key Generator Has Insufficient Session Expiration
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12772
AI - closed7.3LiteLLM CVE-2026-12773: LiteLLM MCP Proxy Has Improper Authentication
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12773
AI - closed6.3LiteLLM CVE-2026-12797: LiteLLM Has Security Feature Bypass in Guardrails
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12797
AI - closed4.3LiteLLM CVE-2026-12799: LiteLLM UI User Enumeration Leads to Information Disclosure
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12799
AI - closed5.0LiteLLM CVE-2026-12771: LiteLLM M2M JWT Handler Has Improper Authorization
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12771
AI - closed8.8LiteLLM LiteLLM API Key Generation Flaw Allows Unauthorized Route Access
Patch now · Disclosed · since 21 May 2026 · CVE-2026-47101
AI - closed8.8LiteLLM LiteLLM User Role Update Vulnerability Enables Privilege Escalation
Patch now · Disclosed · since 21 May 2026 · CVE-2026-47102
AI - closed3.5LiteLLM CVE-2025-11203: LiteLLM information disclosure vulnerability in health endpoint
Patch now · Disclosed · since 29 Oct 2025 · CVE-2025-11203
AI - closed5.4LiteLLM CVE-2025-45809: SQL injection vulnerability in BerriAI LiteLLM
Patch now · Disclosed · since 3 Jul 2025 · CVE-2025-45809
AI - closed7.5LiteLLM CVE-2024-10188: LiteLLM Vulnerable to Denial of Service
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10188
AI - closed7.5LiteLLM CVE-2025-0330: LiteLLM Langfuse API Key Leakage
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0330
AI - closed7.5LiteLLM CVE-2024-8984: LiteLLM Denial of Service via Crafted HTTP Request
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8984
AI - closed8.1LiteLLM CVE-2025-0628: LiteLLM Improper Authorization and Privilege Escalation
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0628
AI - closed8.8LiteLLM CVE-2024-6825: LiteLLM Vulnerable to Remote Code Execution via Rules
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-6825
AI - closed8.7LiteLLM CVE-2024-6587: LiteLLM Server-Side Request Forgery vulnerability
Patch now · Disclosed · since 13 Sep 2024 · CVE-2024-6587
AI - closed4.9LiteLLM CVE-2024-4890: SQL Injection Vulnerability in LiteLLM
Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4890
AI - closed9.8LiteLLM LiteLLM Server-Side Template Injection in Completions Endpoint
Patch now · Disclosed · since 10 Apr 2024 · CVE-2024-2952
AI