5.3
Medium
CVE-2026-108575 A vulnerability has been found in BerriAI LiteLLM up to 1.94.0
Description
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The manipulation of the argument api_key leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm | 1.94.0 | No fix stated |
| litellm | 1.93 | No fix stated |
| litellm | 1.92 | No fix stated |
| litellm | 1.91 | No fix stated |
| litellm | 1.90 | No fix stated |
| litellm | 1.89 | No fix stated |
| litellm | 1.88 | No fix stated |
| litellm | 1.87 | No fix stated |
| litellm | 1.86 | No fix stated |
Show the 86 other branches Hide the 86 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm | 1.85 | No fix stated |
| litellm | 1.84 | No fix stated |
| litellm | 1.83 | No fix stated |
| litellm | 1.82 | No fix stated |
| litellm | 1.81 | No fix stated |
| litellm | 1.80 | No fix stated |
| litellm | 1.79 | No fix stated |
| litellm | 1.78 | No fix stated |
| litellm | 1.77 | No fix stated |
| litellm | 1.76 | No fix stated |
| litellm | 1.75 | No fix stated |
| litellm | 1.74 | No fix stated |
| litellm | 1.73 | No fix stated |
| litellm | 1.72 | No fix stated |
| litellm | 1.71 | No fix stated |
| litellm | 1.70 | No fix stated |
| litellm | 1.69 | No fix stated |
| litellm | 1.68 | No fix stated |
| litellm | 1.67 | No fix stated |
| litellm | 1.66 | No fix stated |
| litellm | 1.65 | No fix stated |
| litellm | 1.64 | No fix stated |
| litellm | 1.63 | No fix stated |
| litellm | 1.62 | No fix stated |
| litellm | 1.61 | No fix stated |
| litellm | 1.60 | No fix stated |
| litellm | 1.59 | No fix stated |
| litellm | 1.58 | No fix stated |
| litellm | 1.57 | No fix stated |
| litellm | 1.56 | No fix stated |
| litellm | 1.55 | No fix stated |
| litellm | 1.54 | No fix stated |
| litellm | 1.53 | No fix stated |
| litellm | 1.52 | No fix stated |
| litellm | 1.51 | No fix stated |
| litellm | 1.50 | No fix stated |
| litellm | 1.49 | No fix stated |
| litellm | 1.48 | No fix stated |
| litellm | 1.47 | No fix stated |
| litellm | 1.46 | No fix stated |
| litellm | 1.45 | No fix stated |
| litellm | 1.44 | No fix stated |
| litellm | 1.43 | No fix stated |
| litellm | 1.42 | No fix stated |
| litellm | 1.41 | No fix stated |
| litellm | 1.40 | No fix stated |
| litellm | 1.39 | No fix stated |
| litellm | 1.38 | No fix stated |
| litellm | 1.37 | No fix stated |
| litellm | 1.36 | No fix stated |
| litellm | 1.35 | No fix stated |
| litellm | 1.34 | No fix stated |
| litellm | 1.33 | No fix stated |
| litellm | 1.32 | No fix stated |
| litellm | 1.31 | No fix stated |
| litellm | 1.30 | No fix stated |
| litellm | 1.29 | No fix stated |
| litellm | 1.28 | No fix stated |
| litellm | 1.27 | No fix stated |
| litellm | 1.26 | No fix stated |
| litellm | 1.25 | No fix stated |
| litellm | 1.24 | No fix stated |
| litellm | 1.23 | No fix stated |
| litellm | 1.22 | No fix stated |
| litellm | 1.21 | No fix stated |
| litellm | 1.20 | No fix stated |
| litellm | 1.19 | No fix stated |
| litellm | 1.18 | No fix stated |
| litellm | 1.17 | No fix stated |
| litellm | 1.16 | No fix stated |
| litellm | 1.15 | No fix stated |
| litellm | 1.14 | No fix stated |
| litellm | 1.13 | No fix stated |
| litellm | 1.12 | No fix stated |
| litellm | 1.11 | No fix stated |
| litellm | 1.10 | No fix stated |
| litellm | 1.9 | No fix stated |
| litellm | 1.8 | No fix stated |
| litellm | 1.7 | No fix stated |
| litellm | 1.6 | No fix stated |
| litellm | 1.5 | No fix stated |
| litellm | 1.4 | No fix stated |
| litellm | 1.3 | No fix stated |
| litellm | 1.2 | No fix stated |
| litellm | 1.1 | No fix stated |
| litellm | 1.0 | No fix stated |
References
- VDB-416232 | BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization vuldb.com
- VDB-416232 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-108575 | CVE Analysis and Report vuldb.com
- Submit #959179 | BerriAI LiteLLM Proxy Server (LiteLLM Gateway) 1.94.0 Insufficiently Protected Credentials / Incorrect Authorization vuldb.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of litellm
The 40 CVEs of litellm →
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
9.9
Critical
CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0
5.3
Medium
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured…
7.6
High
CVE-2026-89032
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that…
8.7
High