BerriAI vulnerabilities
46 CVEs and advisories name BerriAI as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
- CVE-2026-108575BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization
- CVE-2026-108574BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
- CVE-2026-93355LiteLLM Weak JWT Authentication via Email-Based User Lookup
- CVE-2026-89032BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
- CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy
- CVE-2026-84377LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
- CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file references
- CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
- CVE-2026-59820LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
- CVE-2026-49468LiteLLM: Authentication Bypass via Host Header Injection
- CVE-2026-12799BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization
- CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery
- CVE-2026-12797BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization
- CVE-2026-12796BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration
- CVE-2026-12795BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication
- CVE-2026-12774BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery
- CVE-2026-12773BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
- CVE-2026-12772BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration
- CVE-2026-12771BerriAI litellm M2M JWT user_api_key_auth.py improper authorization
- CVE-2026-12770BerriAI litellm Admin Key key_management_endpoints.py improper authorization
- CVE-2026-47102LiteLLM < 1.83.10 Privilege Escalation via User Update
- CVE-2026-47101LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
- CVE-2026-42208LiteLLM: SQL injection in Proxy API key verification
- CVE-2026-42203LiteLLM: Server-Side Template Injection in /prompts/test endpoint
- CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpoints
- CVE-2026-40217LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
- CVE-2026-35030LiteLLM has an authentication bypass via OIDC userinfo cache key collision
- CVE-2026-35029LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint