Litellm
24 known vulnerabilities
Top Products
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Str
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Sk
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header par
A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_vi
A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_open
A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_ope
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm
A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the functi
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file lite
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the
A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/pro
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file
LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint c
LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before vers
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before ver
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before vers
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/t
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authenti
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/updat
Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy
Frequently Asked Questions
How many CVEs affect Litellm?
Litellm has 24 CVE records in our database, including 3 critical and 11 high severity vulnerabilities. 3 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Litellm vulnerabilities?
Litellm has 3 critical severity (CVSS 9.0+) and 11 high severity (CVSS 7.0-8.9) vulnerabilities. 3 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Litellm vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Litellm products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Litellm Vulnerabilities
CyberStrike scans your infrastructure for Litellm vulnerabilities and provides real-time remediation guidance.
Get Started