[ Vendor · 10 CVEs ]
BerriAI
CVEs affecting BerriAI published in the last 30 days, plus any BerriAI CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114612 | 22 Oct 2026 | CVSS 9.9 | BerriAI litellmLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and… | |
| CVE-2026-108575 | 11 Oct 2026 | CVSS 6.3 | BerriAI LiteLLMA vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the… | |
| CVE-2026-108574 | 11 Oct 2026 | CVSS 4.3 | BerriAI LiteLLMA flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file… | |
| CVE-2026-93355 | 28 Sep 2026 | CVSS 8.1 | BerriAI litellmLiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to… | |
| CVE-2026-89032 | 25 Sep 2026 | CVSS 7.7 | BerriAI litellmBerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to… | |
| CVE-2026-84377 | 2 Sep 2026 | CVSS 6.5 | LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parametersLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM… | Fix |
| CVE-2026-59822 | 8 Jul 2026 | CVSS 8.2 | BerriAI LiteLLM Improper AuthenticationLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed… | ExploitedFix |
| CVE-2026-42271 | 8 May 2026 | CVSS 8.8 | BerriAI LiteLLM Command InjectionLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints… | ExploitedFix |
| CVE-2026-42208 | 8 May 2026 | CVSS 9.8 | BerriAI LiteLLM SQL InjectionLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query… | ExploitedFix |
| CVE-2026-33634 | 23 Mar 2026 | CVSS 8.8 | Aquasecurity Trivy Embedded Malicious CodeTrivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push… | Exploited |