Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

LiteLLM — Vulnerabilities & Security Advisories 30

All 30 CVE vulnerabilities found in LiteLLM, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security weaknesses related to LiteLLM, an open-source proxy server designed to standardize calls to various large language model APIs. The content here focuses on vulnerabilities within the LiteLLM ecosystem, including issues found in the proxy layer, underlying dependencies, and configuration patterns that affect the security posture of applications utilizing this middleware. The data collected spans a significant period, covering historical advisories released by the maintainers and third-party researchers since the project’s initial public availability. By reviewing this aggregated information, security professionals and developers can track specific advisory updates issued by the LiteLLM team to stay informed about emerging threats. Users can also gain a deeper understanding of common vulnerability classes affecting proxy-based LLM integrations, allowing them to implement more robust security controls. Furthermore, this resource enables organizations to look up the specific vulnerability history of their LiteLLM deployments, facilitating better risk assessment and prioritization of patching efforts. This approach helps teams identify recurring patterns in reported issues and understand the broader context of security risks associated with managing multiple AI model endpoints through a single unified interface.

Vendor: LiteLLM

CVE ID Title CVSS Severity Published
CVE-2026-108575 BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization CWE-285 6.3 Medium 2026-10-11
CVE-2026-108574 BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization CWE-639 4.3 Medium 2026-10-11
CVE-2026-93355 LiteLLM Weak JWT Authentication via Email-Based User Lookup CWE-1390 8.1 High 2026-09-28
CVE-2026-89032 BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer CWE-863 7.7 High 2026-09-25
CVE-2026-59823 LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy CWE-918 5.3 Medium 2026-09-16
CVE-2026-84377 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters CWE-918 6.5 Medium 2026-09-02
CVE-2026-59819 LiteLLM: Local file read via request-supplied OIDC file references CWE-73 - - 2026-07-08
CVE-2026-59822 LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback CWE-287 8.8 High 2026-07-08
CVE-2026-59820 LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22 - - 2026-07-08
CVE-2026-59821 LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks CWE-94 - - 2026-07-08
CVE-2026-49468 LiteLLM: Authentication Bypass via Host Header Injection CWE-290 - - 2026-06-22
CVE-2026-12799 BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization CWE-285 4.3 Medium 2026-06-21
CVE-2026-12798 BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery CWE-918 6.3 Medium 2026-06-21
CVE-2026-12797 BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization CWE-863 6.3 Medium 2026-06-21
CVE-2026-12796 BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration CWE-613 6.3 Medium 2026-06-21
CVE-2026-12795 BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication CWE-306 7.3 High 2026-06-21
CVE-2026-12774 BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery CWE-918 6.3 Medium 2026-06-21
CVE-2026-12773 BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication CWE-287 7.3 High 2026-06-21
CVE-2026-12772 BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration CWE-613 6.3 Medium 2026-06-21
CVE-2026-12771 BerriAI litellm M2M JWT user_api_key_auth.py improper authorization CWE-285 5.0 Medium 2026-06-21
CVE-2026-12770 BerriAI litellm Admin Key key_management_endpoints.py improper authorization CWE-285 5.4 Medium 2026-06-21
CVE-2026-47102 LiteLLM < 1.83.10 Privilege Escalation via User Update CWE-863 8.8 High 2026-05-21
CVE-2026-47101 LiteLLM < 1.83.14 Privilege Escalation via API Key Generation CWE-863 8.8 High 2026-05-21
CVE-2026-42208 LiteLLM: SQL injection in Proxy API key verification CWE-89 9.1AI Critical AI 2026-05-08
CVE-2026-42203 LiteLLM: Server-Side Template Injection in /prompts/test endpoint CWE-1336 9.6AI Critical AI 2026-05-08
CVE-2026-42271 LiteLLM: Authenticated command execution via MCP stdio test endpoints CWE-77 9.8AI Critical AI 2026-05-08
CVE-2026-40217 LiteLLM 安全漏洞 CWE-420 8.8 High 2026-04-10
CVE-2026-35030 LiteLLM has an authentication bypass via OIDC userinfo cache key collision CWE-287 6.5AI Medium AI 2026-04-06
CVE-2026-35029 LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint CWE-863 8.8AI High AI 2026-04-06
CVE-2025-11203 LiteLLM Information health API_KEY Information Disclosure Vulnerability CWE-200 6.5AI Medium AI 2025-10-29

All 30 known CVE vulnerabilities affecting LiteLLM with full Chinese analysis, references, and POCs where available.