Login Request a demo
BE
Vendor
BerriAI
2 products with CVEs on record
43
CVEs
4
On KEV
1
New 30D
Products
LI
litellm
BerriAI
9.9
28 CVEs4 on KEV1 new
BE
berriai/litellm
berriai
9.8
15 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114612
LI
litellm
BerriAI
9.9
0%
Oct 22LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
CVE-2026-93355
LI
litellm
BerriAI
8.1
0%
Sep 28LiteLLM Weak JWT Authentication via Email-Based User Lookup
CVE-2026-89032
LI
litellm
BerriAI
7.7
0%
Sep 25BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
CVE-2026-59823
LI
litellm
BerriAI
5.3
0%
Sep 16LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy
CVE-2026-84377
LI
litellm
BerriAI
6.5
1%
Sep 2LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
CVE-2026-59819
LI
litellm
BerriAI
4.9
1%
Jul 8LiteLLM: Local file read via request-supplied OIDC file references
CVE-2026-59822
In wildKEV
LI
litellm
BerriAI
8.2
1%
Jul 8LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
CVE-2026-59820
LI
litellm
BerriAI
6.5
1%
Jul 8LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59821
LI
litellm
BerriAI
7.2
1%
Jul 8LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
CVE-2026-49468
LI
litellm
BerriAI
9.8
3%
Jun 22LiteLLM: Authentication Bypass via Host Header Injection
CVE-2026-47102
LI
litellm
BerriAI
8.8
1%
May 21LiteLLM < 1.83.10 Privilege Escalation via User Update
CVE-2026-47101
LI
litellm
BerriAI
8.8
1%
May 21LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
CVE-2026-42208
In wildKEV
LI
litellm
BerriAI
9.8
89%
May 8LiteLLM: SQL injection in Proxy API key verification
CVE-2026-42203
LI
litellm
BerriAI
8.8
0%
May 8LiteLLM: Server-Side Template Injection in /prompts/test endpoint
CVE-2026-42271
In wildKEV
LI
litellm
BerriAI
8.8
91%
May 8LiteLLM: Authenticated command execution via MCP stdio test endpoints
CVE-2026-40217
LI
LiteLLM
BerriAI
8.8
16%
Apr 10LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI
CVE-2026-35030
LI
litellm
BerriAI
9.1
1%
Apr 6LiteLLM has an authentication bypass via OIDC userinfo cache key collision
CVE-2026-35029
LI
litellm
BerriAI
8.8
39%
Apr 6LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint
CVE-2026-33634
In wildKEV
LI
LiteLLM
BerriAI
8.8
60%
Mar 23Trivy ecosystem supply chain briefly compromised
CVE-2024-6825
BE
berriai/litellm
berriai
8.8
2%
Mar 20Remote Code Execution in BerriAI/litellm
CVE-2024-10188
BE
berriai/litellm
berriai
7.5
1%
Mar 20Denial of Service in BerriAI/litellm
CVE-2025-0628
BE
berriai/litellm
berriai
8.1
0%
Mar 20Improper Authorization in BerriAI/litellm
CVE-2025-0330
BE
berriai/litellm
berriai
7.5
1%
Mar 20Exposure of Sensitive Information in berriai/litellm
CVE-2024-9606
BE
berriai/litellm
berriai
7.5
1%
Mar 20Improper Output Neutralization for Logs in berriai/litellm
CVE-2024-8984
BE
berriai/litellm
berriai
7.5
1%
Mar 20Denial of Service (DoS) in berriai/litellm
CVE-2024-6587
BE
berriai/litellm
berriai
7.5
34%
Sep 13SSRF in berriai/litellm
CVE-2024-42679
LI
Litellm
Berriai
7.8
0%
Aug 15SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrary code via a crafted script to…
CVE-2024-5710
BE
berriai/litellm
berriai
6.5
0%
Jun 27Improper Access Control in Team Management in berriai/litellm
CVE-2024-5751
BE
berriai/litellm
berriai
9.8
1%
Jun 27Remote Code Execution in BerriAI/litellm
CVE-2024-4888
BE
berriai/litellm
berriai
8.1
1%
Jun 6Arbitrary File Deletion in BerriAI/litellm
CVE-2024-4890
BE
berriai/litellm
berriai
4.9
1%
Jun 6Blind SQL Injection in berriai/litellm
CVE-2024-5225
BE
berriai/litellm
berriai
7.2
0%
Jun 6SQL Injection in berriai/litellm
CVE-2024-4889
BE
berriai/litellm
berriai
7.2
1%
Jun 6Code Injection in berriai/litellm
CVE-2024-4264
BE
berriai/litellm
berriai
9.8
1%
May 18Remote Code Execution in berriai/litellm
CVE-2024-2952
BE
berriai/litellm
berriai
9.8
1%
Apr 10Server-Side Template Injection in BerriAI/litellm