CVE Tools
Track your stack

Litellm

51 CVEs tracked. 4 of them are in CISA KEV.

This hub aggregates every CVE we track for Litellm, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Litellm CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Litellm CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-036
2025-040
2025-050
2025-060
2025-071
2025-080
2025-090
2025-101
2025-110
2025-120
2026-010
2026-020
2026-032
2026-045
2026-055
2026-0611
2026-074
2026-080
2026-094
2026-103

Severity

How the 51 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical715%
  • High2349%
  • Medium1634%
  • Low12%

Latest CVEs

The 15 most recently published vulnerabilities affecting Litellm.

  1. CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key9.9
  2. CVE-2026-108575BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization6.3
  3. CVE-2026-108574BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization4.3
  4. CVE-2026-93355LiteLLM Weak JWT Authentication via Email-Based User Lookup8.1
  5. CVE-2026-89032BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer7.7
  6. CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy—
  7. CVE-2026-84377LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters6.5
  8. CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file references4.9
  9. CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback8.2
  10. CVE-2026-59820LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6.5
  11. CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks7.2
  12. CVE-2026-49468LiteLLM: Authentication Bypass via Host Header Injection9.8
  13. CVE-2026-12799BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization4.3
  14. CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery6.3
  15. CVE-2026-12797BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization6.3

Product grouping is registry-driven, with AI assist and human review. How it works