785 matches found
CVE-2026-41314 vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...
GHSA-V4P8-MG3P-G94G vulnerabilities
Vulnerabilities for packages: litellm, airflow...
GHSA-R75F-5X8P-QVMC vulnerabilities
Vulnerabilities for packages: litellm, airflow...
GHSA-XQMJ-J6MV-4862 vulnerabilities
Vulnerabilities for packages: litellm, airflow...
CVE-2025-14546 vulnerabilities
Vulnerabilities for packages: litellm...
GHSA-HP6R-R9VC-Q8WX vulnerabilities
Vulnerabilities for packages: litellm...
📄 LiteLLM 1.83.0 Insecure Direct Object Reference
LiteLLM exposes a /config/update API endpoint that allows administrators to make configuration changes to the instance. Due to a missing authorization check, low-privileged users can access this endpoint without restriction. An attacker with a low-privileged account can exploit this to exfiltrate...
CVE-2026-42208
A flaw was found in LiteLLM. A database query used for proxy API key checks incorrectly incorporated caller-supplied key values directly into the query. This vulnerability allows an unauthenticated attacker to send a specially crafted Authorization header to any Large Language Model LLM API route...
Exploit for CVE-2026-42208
LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduct...
SQL Injection
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to SQL Injection via the token lookup query in the combined view path. An attacker can extract or manipulate records by supplying a crafted token value that is interpolated...
Improper Neutralization of Special Elements Used in a Template Engine
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the POST /prompts/test endpoint, which accepts user-supplied prompt templates and renders them...
PT-2026-37176
Name of the Vulnerable Software and Affected Versions LiteLLM versions 1.80.5 through 1.83.6 Description The 'POST /prompts/test' endpoint accepts user-supplied prompt templates and renders them without sandboxing. An authenticated user with a valid proxy API key can provide a crafted template to...
PT-2026-36134
Impact The POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user cou...
BerriAI LiteLLM Proxy MCP Test Endpoint Command Execution
This module exploits CVE-2026-42271, a command execution vulnerability in the BerriAI LiteLLM proxy. The MCP "test" REST endpoints POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list, used by the admin UI to preview an MCP server before saving it, accept a full server configuration ...
Command Injection
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Command Injection via preview MCP server endpoints POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list. An attacker can execute arbitrary commands by accessin...
Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain
Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's MCP architecture that could pave the way for remote code execution and have a cascading effect on the artificial intelligence AI supply chain. "This flaw enables Arbitrary Command Execution R...
BerriAI LiteLLM Proxy Pre-Auth SQL Injection Scanner
This module detects BerriAI LiteLLM proxy servers affected by CVE-2026-42208, an unauthenticated SQL injection. During API-key verification the proxy interpolates the raw Authorization bearer value into a PostgreSQL query WHERE v.token = '' without parameterization. Because LiteLLM only hashes...
CVE-2026-40260 vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...