CVE Tools
Track your stack

Litellm

17 CVEs tracked since 2024. Since Jun 2024, none of them reached CISA KEV.

Litellm CVEs per month

Jun 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Litellm CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0660
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-06110
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1011 or fewer
2026-113 or fewer

Products

The products that kept showing up in Litellm's monthly top three, with their CVEs summed over those months.

  1. Litellm172 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Litellm.

  1. CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file references4.9
  2. CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback8.2
  3. CVE-2026-59820LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6.5
  4. CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks7.2
  5. CVE-2026-49468LiteLLM: Authentication Bypass via Host Header Injection9.8
  6. CVE-2026-12799BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization4.3
  7. CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery6.3
  8. CVE-2026-12797BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization6.3
  9. CVE-2026-12796BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration6.3
  10. CVE-2026-12795BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication7.3
  11. CVE-2026-12774BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery6.3
  12. CVE-2026-12773BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication7.3
  13. CVE-2026-12772BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration6.3
  14. CVE-2026-12771BerriAI litellm M2M JWT user_api_key_auth.py improper authorization5.0
  15. CVE-2026-12770BerriAI litellm Admin Key key_management_endpoints.py improper authorization5.4

The record

Peak rank
#115 in Jun 2024
Busiest month shown
Jun 2026, 11 CVEs
Months with a KEV entry
0 since Jun 2024
Monthly snapshots
2 since 2024
Litellm's full record, month by month