# cve.now: BerriAI

The newest entries naming BerriAI as an affected vendor (up to 200), of 46 in all, 4 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-114612](https://cve.now/CVE-2026-114612.md): LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key (CVSS 9.9)
- [CVE-2026-108575](https://cve.now/CVE-2026-108575.md): BerriAI LiteLLM Secret Resolution main.py get\_secret improper authorization (CVSS 5.3)
- [CVE-2026-108574](https://cve.now/CVE-2026-108574.md): BerriAI LiteLLM Spend Tracking spend\_management\_endpoints.py ui\_view\_session\_spend\_logs authorization (CVSS 5.3)
- [CVE-2026-93355](https://cve.now/CVE-2026-93355.md): LiteLLM Weak JWT Authentication via Email-Based User Lookup (CVSS 7.6)
- [CVE-2026-89032](https://cve.now/CVE-2026-89032.md): BerriAI LiteLLM \< 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer (CVSS 8.7)
- [CVE-2026-59823](https://cve.now/CVE-2026-59823.md): LiteLLM: Server-side request forgery via the \`user\_config\` request parameter in LiteLLM Proxy (CVSS 5.3)
- [CVE-2026-84377](https://cve.now/CVE-2026-84377.md): LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters (CVSS 6.5)
- [CVE-2026-59819](https://cve.now/CVE-2026-59819.md): LiteLLM: Local file read via request-supplied OIDC file references (CVSS 2.1)
- [CVE-2026-59822](https://cve.now/CVE-2026-59822.md): LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback (CVSS 8.8, KEV)
- [CVE-2026-59820](https://cve.now/CVE-2026-59820.md): LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 6.1)
- [CVE-2026-59821](https://cve.now/CVE-2026-59821.md): LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks (CVSS 2.1)
- [CVE-2026-49468](https://cve.now/CVE-2026-49468.md): LiteLLM: Authentication Bypass via Host Header Injection (CVSS 9.5)
- [CVE-2026-12799](https://cve.now/CVE-2026-12799.md): BerriAI litellm Incomplete Fix CVE-2025-0628 internal\_user\_endpoints.py ui\_view\_users improper authorization (CVSS 5.3)
- [CVE-2026-12798](https://cve.now/CVE-2026-12798.md): BerriAI litellm MCP OpenAPI Spec Loader openapi\_to\_mcp\_generator.py load\_openapi\_spec\_async server-side request forgery (CVSS 5.3)
- [CVE-2026-12797](https://cve.now/CVE-2026-12797.md): BerriAI litellm Completions banned\_keywords.py async\_pre\_call\_hook authorization (CVSS 5.3)
- [CVE-2026-12796](https://cve.now/CVE-2026-12796.md): BerriAI litellm SSO Authentication Flow ui\_sso.py get\_redirect\_response\_from\_openid session expiration (CVSS 5.3)
- [CVE-2026-12795](https://cve.now/CVE-2026-12795.md): BerriAI litellm SSO Debug Flow ui\_sso.py json.dumps missing authentication (CVSS 6.9)
- [CVE-2026-12774](https://cve.now/CVE-2026-12774.md): BerriAI litellm MCP Server Connection Testing rest\_endpoints.py \_execute\_with\_mcp\_client server-side request forgery (CVSS 5.3)
- [CVE-2026-12773](https://cve.now/CVE-2026-12773.md): BerriAI litellm MCP Proxy user\_api\_key\_auth\_mcp.py UserAPIKeyAuth improper authentication (CVSS 6.9)
- [CVE-2026-12772](https://cve.now/CVE-2026-12772.md): BerriAI litellm PROXY\_ADMIN database API Key Generator login\_utils.py authenticate\_user session expiration (CVSS 5.3)
- [CVE-2026-12771](https://cve.now/CVE-2026-12771.md): BerriAI litellm M2M JWT user\_api\_key\_auth.py improper authorization (CVSS 2.3)
- [CVE-2026-12770](https://cve.now/CVE-2026-12770.md): BerriAI litellm Admin Key key\_management\_endpoints.py improper authorization (CVSS 5.3)
- [CVE-2026-47102](https://cve.now/CVE-2026-47102.md): LiteLLM \< 1.83.10 Privilege Escalation via User Update (CVSS 8.7)
- [CVE-2026-47101](https://cve.now/CVE-2026-47101.md): LiteLLM \< 1.83.14 Privilege Escalation via API Key Generation (CVSS 8.7)
- [CVE-2026-42208](https://cve.now/CVE-2026-42208.md): LiteLLM: SQL injection in Proxy API key verification (CVSS 9.3, KEV)
- [CVE-2026-42203](https://cve.now/CVE-2026-42203.md): LiteLLM: Server-Side Template Injection in /prompts/test endpoint (CVSS 8.6)
- [CVE-2026-42271](https://cve.now/CVE-2026-42271.md): LiteLLM: Authenticated command execution via MCP stdio test endpoints (CVSS 8.7, KEV)
- [CVE-2026-40217](https://cve.now/CVE-2026-40217.md): LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test\_custom\_code URI. (CVSS 8.8)
- [CVE-2026-35030](https://cve.now/CVE-2026-35030.md): LiteLLM has an authentication bypass via OIDC userinfo cache key collision (CVSS 9.4)
- [CVE-2026-35029](https://cve.now/CVE-2026-35029.md): LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint (CVSS 8.7)
- [CVE-2026-33634](https://cve.now/CVE-2026-33634.md): Trivy ecosystem supply chain briefly compromised (CVSS 9.4, KEV)
- [CVE-2024-6825](https://cve.now/CVE-2024-6825.md): Remote Code Execution in BerriAI/litellm (CVSS 8.8)
- [CVE-2024-10188](https://cve.now/CVE-2024-10188.md): Denial of Service in BerriAI/litellm (CVSS 7.5)
- [CVE-2025-0628](https://cve.now/CVE-2025-0628.md): Improper Authorization in BerriAI/litellm (CVSS 8.1)
- [CVE-2025-0330](https://cve.now/CVE-2025-0330.md): Exposure of Sensitive Information in berriai/litellm (CVSS 7.5)
- [CVE-2024-9606](https://cve.now/CVE-2024-9606.md): Improper Output Neutralization for Logs in berriai/litellm (CVSS 7.5)
- [CVE-2024-8984](https://cve.now/CVE-2024-8984.md): Denial of Service (DoS) in berriai/litellm (CVSS 7.5)
- [CVE-2024-6587](https://cve.now/CVE-2024-6587.md): SSRF in berriai/litellm (CVSS 7.5)
- [CVE-2024-5710](https://cve.now/CVE-2024-5710.md): Improper Access Control in Team Management in berriai/litellm (CVSS 5.3)
- [CVE-2024-5751](https://cve.now/CVE-2024-5751.md): Remote Code Execution in BerriAI/litellm (CVSS 9.8)
- [CVE-2024-4888](https://cve.now/CVE-2024-4888.md): Arbitrary File Deletion in BerriAI/litellm (CVSS 6.5)
- [CVE-2024-4890](https://cve.now/CVE-2024-4890.md): Blind SQL Injection in berriai/litellm (CVSS 4.9)
- [CVE-2024-5225](https://cve.now/CVE-2024-5225.md): SQL Injection in berriai/litellm (CVSS 6.4)
- [CVE-2024-4889](https://cve.now/CVE-2024-4889.md): Code Injection in berriai/litellm (CVSS 7.2)
- [CVE-2024-4264](https://cve.now/CVE-2024-4264.md): Remote Code Execution in berriai/litellm (CVSS 9.8)
- [CVE-2024-2952](https://cve.now/CVE-2024-2952.md): Server-Side Template Injection in BerriAI/litellm (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/berriai
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.