litellm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-84377Mediumlitellm: LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parametersCVE-2026-59823Mediumlitellm: LiteLLM Proxy has server-side request forgery via the `user_config` request parameterCVE-2026-37004Criticallitellm: LiteLLM vulnerable to server-side template injection in the /prompts/test endpointCVE-2026-59821Lowlitellm: LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksCVE-2026-59822Highlitellm: LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackCVE-2026-59819Lowlitellm: LiteLLM: Local file read via request-supplied OIDC file referencesCVE-2026-59820Mediumlitellm: LiteLLM: Arbitrary file write via path traversal in Skills archive extractionCVE-2026-12799Lowlitellm: BerriAI litellm: UI User Enumeration leads to System-Wide Information DisclosureCVE-2026-12798Lowlitellm: BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec LoaderCVE-2026-12797Lowlitellm: BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async EndpointsCVE-2026-12796Lowlitellm: BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session TokensCVE-2026-12795Mediumlitellm: LiteLLM: SSO Debug Flow Has Improper AuthenticationCVE-2026-12773Mediumlitellm: LiteLLM: MCP Proxy Has Improper AuthenticationCVE-2026-12770Lowlitellm: LiteLLM: Admin Key Handler Has Improper AuthorizationCVE-2026-12771Lowlitellm: LiteLLM: M2M JWT Handler Has Improper AuthorizationCVE-2026-12772Lowlitellm: LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session ExpirationCVE-2026-49468Criticallitellm: LiteLLM: Authentication Bypass via Host Header InjectionCVE-2026-47102Highlitellm: LiteLLM allows a user to modify their own user_role via the /user/update endpointCVE-2026-47101Highlitellm: LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permitCVE-2026-40217Highlitellm: LiteLLM has a sandbox escape in custom-code guardrailCVE-2026-42271Highlitellm: LiteLLM: Authenticated command execution via MCP stdio test endpointsCVE-2026-42208Criticallitellm: LiteLLM has SQL Injection in Proxy API key verificationCVE-2026-42203Highlitellm: LiteLLM: Server-Side Template Injection in /prompts/test endpointGHSA-69X8-HRGQ-FJJ8Highlitellm: LiteLLM: Password hash exposure and pass-the-hash authentication bypassCVE-2026-35030Criticallitellm: LiteLLM: Authentication bypass via OIDC userinfo cache key collision

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo