Embedded Malicious Code

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Embedded Malicious Code. Vulnerable releases of this package were compromised with malicious code that conceals a multi-stage credential stealer and persistent backdoor. A...

GHSA-QPXP-75PX-XJCP vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

CVE-2026-33123 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

GHSA-QJXF-F2MG-C6MC vulnerabilities

Vulnerabilities for packages: dask-kubernetes, airflow, mitmproxy, litellm, kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, tensorflow-gpu-jupyter...

CVE-2026-31958 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, airflow, mitmproxy, litellm, kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, tensorflow-gpu-jupyter...

GHSA-HQMH-PPP3-XVM7 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, litellm...

CVE-2026-31826 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, litellm...

CVE-2026-28804 vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-9M86-7PMV-2852 vulnerabilities

Vulnerabilities for packages: litellm...

PT-2026-42539

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.10 Description An issue exists where the '/user/update' endpoint does not restrict which fields a user can modify when updating their own account. This allows a user to change their user role to proxy admin,...

PT-2026-31920

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.11 Description A flaw in the proxy server allows remote attackers to execute arbitrary code via bytecode rewriting. The issue exists because the POST /guardrails/test custom code endpoint runs user-supplied Pytho...

Insertion of Sensitive Information into Log File

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the userapikeyauthbuilder function, which leaks expired session keys into the authentication error output of other...

CVE-2025-67221 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kserve, litellm, authentik-fips, authentik, emissary...

GHSA-HX9Q-6W63-J58V vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kserve, litellm, authentik-fips, authentik, emissary...

CVE-2024-2952

BerriAI/litellm is vulnerable to Server-Side Template Injection SSTI via the /completions endpoint. The vulnerability arises from the hfchattemplate method processing the chattemplate parameter from the tokenizerconfig.json file through the Jinja template engine without proper sanitization...

Information Exposure

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Information Exposure due to improper masking of raw request headers in the precall method of litellm/litellmcoreutils/litellmlogging.py. An attacker can obtain exposed API...

Insertion of Sensitive Information into Externally-Accessible File or Directory

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Insertion of Sensitive Information into Externally-Accessible File or Directory due to incomplete masking of OCI secret fields in responses from the /models and /v1/models...

Insertion of Sensitive Information into Log File

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the getredirectresponsefromopenid and forwardupstreamtoclient functions. An attacker can obtain sensitive authenticatio...

EUVD-2025-36712

LiteLLM Information health APIKEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the...

CVE-2025-11203

LiteLLM Information health APIKEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the...