| CVE-2026-114612 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
9.9
Critical
|
Oct 22, 2026 |
| CVE-2026-49468 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
9.5
Critical
|
Jun 22, 2026 |
| CVE-2026-42208 |
Exploited
BerriAI LiteLLM SQL Injection Vulnerability
|
9.3
Critical
|
May 8, 2026 |
| CVE-2026-35030 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
9.4
Critical
|
Apr 6, 2026 |
| CVE-2026-33634 |
Exploited
Aquasecurity Trivy Embedded Malicious Code Vulnerability
|
9.4
Critical
|
Mar 23, 2026 |
| CVE-2024-5751 |
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution
|
9.8
Critical
|
Jun 27, 2024 |
| CVE-2024-4264 |
A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the…
|
9.8
Critical
|
May 18, 2024 |
| CVE-2024-2952 |
BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint
|
9.8
Critical
|
Apr 10, 2024 |