Advisories · Technology
BerriAI LiteLLM.
Every CVE that names BerriAI LiteLLM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization
- BerriAI LiteLLM
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
- BerriAI LiteLLM
- Broken access control
- CVSS 7.6 High
LiteLLM Weak JWT Authentication via Email-Based User Lookup
- BerriAI litellm
- Authentication bypass
- CVSS 8.7 High
BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
- BerriAI litellm
- Broken access control
- CVSS 5.3 Medium
BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery
- BerriAI litellm
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Code Injection in berriai/litellm
- berriai/litellm
- Code injection