EUVD-2026-28507

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration i...

CVE-2026-42271

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration i...

CVE-2026-42271

Summary: CVE-2026-42271 affects LiteLLM up to v1.83.7, where two MCP preview endpoints (POST /mcp-rest/test/connection and /tools/list) could spawn arbitrary commands via stdio transport when provided a full server config, restricted only by a valid API key. The subprocess ran with the proxy’s pr...

CVE-2026-42271 LiteLLM: Authenticated command execution via MCP stdio test endpoints

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration i...

LiteLLM 安全漏洞

LiteLLM is an open-source application developed by Berri AI. It allows for the invocation of all LLM APIs in the OpenAI format. Versions of LiteLLM from 1.80.5 to 1.83.7 contained a security vulnerability. This vulnerability stemmed from the POST /prompts/test endpoint accepting user-provided...

LiteLLM 命令注入漏洞

LiteLLM is an open-source application developed by Berri AI. It can utilize all LLM APIs in the OpenAI format. Versions of LiteLLM from 1.74.2 to 1.83.7 contained a command injection vulnerability. This vulnerability stemmed from two endpoints used for previewing the MCP server accepting complete...

CVE-2026-42203 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

CVE-2026-41314 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

CVE-2026-42271 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

CVE-2026-42208 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

CVE-2026-41168 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

CVE-2026-41313 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

CVE-2026-41312 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-R75F-5X8P-QVMC vulnerabilities

Vulnerabilities for packages: airflow, litellm...

GHSA-HP6R-R9VC-Q8WX vulnerabilities

Vulnerabilities for packages: litellm...

CVE-2025-14546 vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-XQMJ-J6MV-4862 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

GHSA-V4P8-MG3P-G94G vulnerabilities

Vulnerabilities for packages: airflow, litellm...

📄 LiteLLM 1.83.0 Insecure Direct Object Reference

LiteLLM exposes a /config/update API endpoint that allows administrators to make configuration changes to the instance. Due to a missing authorization check, low-privileged users can access this endpoint without restriction. An attacker with a low-privileged account can exploit this to exfiltrate...

CVE-2026-42208

A flaw was found in LiteLLM. A database query used for proxy API key checks incorrectly incorporated caller-supplied key values directly into the query. This vulnerability allows an unauthenticated attacker to send a specially crafted Authorization header to any Large Language Model LLM API route...