LiteLLM SQL injection vulnerability

LiteLLM is an open-source application developed by Berri AI. It allows for the invocation of all LLM APIs in the OpenAI format. LiteLLM has a SQL injection vulnerability, and attackers can exploit this vulnerability to obtain sensitive database information...

📄 LiteLLM 1.83.6 Blind SQL Injection

A proof of concept exploit for a pre-authentication blind SQL injection vulnerability in LiteLLM version 1.83.6. The vulnerability affects LiteLLM proxy versions 1.81.16 through 1.83.6 and occurs because the virtual-key lookup interpolates an unauthenticated bearer token directly into a PostgreSQ...

CLEANSTART-2026-RF99119 Security fixes in litellm-database 1.89.5-r0

Package litellm-database version 1.89.5-r0 fixes 4 vulnerabilities: CVE-2026-59936, CVE-2026-59935, CVE-2026-59937, CVE-2026-59938...

CLEANSTART-2026-PU95946 Security fixes in litellm-database 1.91.1-r0

Package litellm-database version 1.91.1-r0 fixes 1 vulnerabilities: CVE-2026-50271...

CLEANSTART-2026-PS13289 Security fixes in litellm-database 1.91.3-r0

Package litellm-database version 1.91.3-r0 fixes 1 vulnerabilities: CVE-2026-50271...

CLEANSTART-2026-JX06372 Security fixes in litellm-database 1.90.4-r0

Package litellm-database version 1.90.4-r0 fixes 1 vulnerabilities: CVE-2026-50271...

CLEANSTART-2026-IJ98637 Security fixes in litellm-database 1.90.2-r1

Package litellm-database version 1.90.2-r1 fixes 1 vulnerabilities: CVE-2026-0994...

VulnCheck KEV: CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...

CVE-2026-59935 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

CVE-2026-59938 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

GHSA-5QJQ-93H5-HRGP vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

GHSA-55H5-XMCQ-C37V vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

GHSA-5XF7-4P34-54QR vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

CVE-2026-59937 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

GHSA-G867-7843-WF8Q vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

CVE-2026-59936 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

VulnCheck KEV: CVE-2026-59821

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to creat...

Authentication Bypass

LiteLLM is vulnerable to Authentication Bypass. The vulnerability is due to improper handling of the MCP authentication fallback path, where failed LiteLLM key validation is replaced with an empty authentication object, which allows an unauthenticated attacker to exploit the MCP Streamable HTTP...

Path Traversal

LiteLLM is vulnerable to Path Traversal. The vulnerability is due to the /health/testconnection endpoint resolving request-supplied environment and OIDC file references in litellmparams, which allows an attacker with sufficient privileges to read arbitrary files from the local filesystem by...

PYSEC-2026-3478 LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

Impact LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint. A privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In...