litellm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-35029Highlitellm: LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint GHSA-5MG7-485Q-XM76Criticallitellm: Two LiteLLM versions published containing credential harvesting malware CVE-2025-0330Highlitellm: LiteLLM Has a Leakage of Langfuse API Keys CVE-2025-0628Highlitellm: LiteLLM Has an Improper Authorization Vulnerability CVE-2024-9606Highlitellm: LiteLLM Reveals Portion of API Key via a Logging File CVE-2024-8984Highlitellm: LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request CVE-2024-6825Highlitellm: LiteLLM Vulnerable to Remote Code Execution (RCE)CVE-2024-10188Highlitellm: LiteLLM Vulnerable to Denial of Service (DoS)CVE-2024-6587Highlitellm: LiteLLM Server-Side Request Forgery (SSRF) vulnerability CVE-2024-5710Mediumlitellm: litellm vulnerable to improper access control in team management CVE-2024-5751Criticallitellm: litellm vulnerable to remote code execution based on using eval unsafely CVE-2024-5225Mediumlitellm: SQL injection in litellm CVE-2024-4890Mediumlitellm: SQL injection in litellm CVE-2024-4888Highlitellm: Arbitrary file deletion in litellm CVE-2024-4264Highlitellm: litellm passes untrusted data to `eval` function without sanitization CVE-2024-2952Criticallitellm: LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo