CVE-2026-89032 BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer

BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...

CVE-2026-89032 BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer

BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...

CVE-2026-89032: Incorrect Authorization

BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...

PT-2026-98928

Name of the Vulnerable Software and Affected Versions BerriAI LiteLLM versions prior to 1.101.0-rc.1 Description A tenant isolation bypass exists in the semantic cache layer due to a metadata key mismatch between the get semantic cache tenant scope and get metadata variable name functions...

CLEANSTART-2026-FT89883 Security fix for CVE-2026-48710 applied in: airflow-3 3.0.6-r5, airflow-3 3.1.8-r2, airflow-3 3.2.0-r0, k8s-sidecar 2.2.3-r1, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-48710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CR88221 Security fix for CVE-2026-48525 applied in: airflow-2 2.11.2-r3, airflow-3 3.1.8-r3, airflow-3 3.2.1-r2, apache-superset 5.0.0-r7, apache-superset 6.0.0-r5, az 2.83.0-r2, az 2.84.0-r3, jupyterhub-k8s-hub 4.3.5-r1, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-48525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LF37646 Security fix for CVE-2026-34180 applied in: apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, kserve-storage-controller 0.19.0-r0, litellm-database 1.90.2-r0

CVE-2026-34180 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM84603 Security fix for CVE-2026-57204 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JY50782 Security fix for CVE-2026-54531 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PT72427 Security fix for CVE-2026-54651 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SQ66905 Security fix for CVE-2026-54530 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SB78573 Security fix for CVE-2026-54283 applied in: airflow-3 3.0.6-r5, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0, litellm-database 1.96.0-r0, litellm-database 1.97.0-r0

CVE-2026-54283 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EW07034 Security fix for CVE-2026-54282 applied in: airflow-3 3.0.6-r5, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0, litellm-database 1.96.0-r0, litellm-database 1.97.0-r0

CVE-2026-54282 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WK76849 Security fix for CVE-2026-53540 applied in: kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-53540 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EB34508 Security fix for CVE-2026-53539 applied in: kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-53539 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PR66468 Security fix for CVE-2026-49461 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JY83445 Security fix for CVE-2026-53537 applied in: kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-53537 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DZ15025 Security fix for CVE-2026-49460 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EH91942 Security fix for CVE-2026-48818 applied in: kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0, litellm-database 1.96.0-r0, litellm-database 1.97.0-r0

CVE-2026-48818 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OL54879 Security fix for CVE-2026-48817 applied in: kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-48817 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...