BerriAI LiteLLM vulnerabilities
31 published CVEs name BerriAI LiteLLM among the affected products; CISA lists 4 of them as exploited in the wild.
- 31Published CVEs31 of them scored
- 31Last 12 monthspublished in the last year
- 5Critical9 more rated high
- 4Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-59822
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
BerriAI · litellm
ExploitedHigh8.8 - CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
BerriAI · litellm
ExploitedHigh8.7 - CVE-2026-42208
LiteLLM: SQL injection in Proxy API key verification
BerriAI · litellm
ExploitedCritical9.3 - CVE-2026-33634
Trivy ecosystem supply chain briefly compromised
aquasecurity · setup-trivy
ExploitedCritical9.4