Skip to content
Sign in

BerriAI product

litellm

Alert
No CISA KEV deadline is open. CISA last added a litellm CVE on 2 Sep.

Tracked since 29 Apr · latest article 23 Oct · RSS · API

0Open KEV deadlines

None open

1Added to KEV · 90 days

of 3 in the full CISA catalogue · all time

2High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date3

litellm CVEs in CISA KEV with their federal deadlines. None is open.

Exploited litellm CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-59822LiteLLM2 SepPassed 16 Sep1
In CISA KEVCVE-2026-42271LiteLLM8 JunPassed 22 Jun25
In CISA KEVCVE-2026-42208LiteLLM8 MayPassed 11 May9
Vendor CSV of 3 entries for BerriAIAll 3 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds litellm CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’262Q2 ’261Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20262
Q3 20261
Q4 20260

Fix listed

5 of 8 CVEs in coverage

3 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-42271: 99.8th percentile, in CISA KEVCVE-2026-42208: 99.8th percentile, in CISA KEVCVE-2026-59822: 57.7th percentile, in CISA KEVCVE-2026-35029: 98.6th percentileCVE-2026-40217: 96.8th percentileCVE-2026-49468: 87.5th percentileCVE-2026-59821: 59.8th percentileCVE-2026-59823: 38.2th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-4227199.8
CVE-2026-4220899.8
CVE-2026-3502998.6
CVE-2026-4021796.8
CVE-2026-4946887.5
CVE-2026-5982159.8
CVE-2026-5982257.7
CVE-2026-5982338.2

Coverage37 articles · all time

The latest 37 articles naming litellm, in the shared story grammar.

Full timeline
Quiet for 10 dayslast report 23 Oct37 articles8 outlets

37 articles from 8 outlets since 29 Apr. Quiet since 23 Oct.

Now29 Apr17263101831 Aug132130815First reportThe Hacker News · 29 Apr, 06:19CISA alert8 May, 17:31 · official
  • Wed 29 Apr, 06:19 UTC. The Hacker News, first report. LiteLLM SQL flaw CVE‑2026‑42208 exploited hours after disclosure. Cites a CVE in CISA KEV.
  • Wed 29 Apr, 13:22 UTC. SecurityWeek, its first report on the story. LiteLLM SQL injection flaw (CVE-2026-42208) exposes API keys. Cites a CVE in CISA KEV.
  • Wed 29 Apr, 21:11 UTC. Security Affairs, its first report on the story. LiteLLM flaw CVE-2026-42208 exploited within hours of disclosure. Cites a CVE in CISA KEV.
  • Mon 4 May, 15:32 UTC. SOCRadar, its first report on the story. Dark web lists WhatsApp data, Indian bank VPN for sale. Cites a CVE in CISA KEV.
  • Fri 8 May, 17:31 UTC. CISA, its first report on the story. CISA adds LiteLLM SQLi flaw to KEV as active exploits emerge. Cites a CVE in CISA KEV.
  • Fri 8 May, 17:35 UTC. CISA. BerriAI LiteLLM Flaw Exposes Proxy Data, CISA Adds KEV Entry. Cites a CVE in CISA KEV.
  • Fri 8 May, 19:01 UTC. CISA. CISA Adds One Known Exploited Vulnerability to Catalog. Cites a CVE in CISA KEV.
  • Mon 11 May, 10:28 UTC. Security Affairs. CISA flags LiteLLM SQLi flaw exploited hours after disclosure. Cites a CVE in CISA KEV.
  • Mon 8 Jun, 19:54 UTC. CISA. CISA warns of LiteLLM command injection flaw CVE-2026-42271. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 00:50 UTC. SecurityOnline, its first report on the story. Unveils AI Powered iOS 27 and macOS 27 Amid Critical CVE Alerts. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 00:50 UTC. SecurityOnline. Sovereign Intelligence: Apple Reimagines Siri with Gemini Core Integration at WWDC 2026. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 00:50 UTC. SecurityOnline. Malicious PyPI Package Wave Spreads Evolving Supply Chain Attacks. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 00:50 UTC. SecurityOnline. New Chrome Security Update Addresses Critical V8 Exploit in the Wild. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 00:51 UTC. SecurityOnline. CISA Active Exploit Catalog Expands with Critical Gateway Flaws. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 01:48 UTC. CISA. CISA warns of LiteLLM command injection flaw CVE-2026-42271. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 03:01 UTC. SecurityOnline. Critical Flaws Hit LiteLLM Check Point and TP Link Devices. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 03:01 UTC. SecurityOnline. Apache HTTP Server 2.4.68 fixes critical bugs to protect systems. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 03:02 UTC. SecurityOnline. Sovereign Synthesis: Apple Unveils Gemini-Powered Siri AI and macOS Golden Gate. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 03:02 UTC. SecurityOnline. Pragmatic Refinement: Apple Rebalances Aesthetics and Performance at WWDC 2026. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 03:02 UTC. SecurityOnline. Apache MINA Patches Critical Framework Vulnerabilities.
  • Tue 9 Jun, 05:15 UTC. SecurityOnline. Check Point VPN flaw hits as OpenAI files for $1 trillion IPO. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 05:17 UTC. SecurityOnline. Check Point VPN exploit active as Apple Notes adds Markdown export. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 05:20 UTC. SecurityOnline. Apple iOS 27 Adds AI Password Reset Amid Two Critical CVEs. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 07:00 UTC. The Hacker News. LiteLLM flaw CVE-2026-42271 lets hackers execute code remotely. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 08:40 UTC. SecurityOnline. Microsoft updates OneDrive policy amid LiteLLM, Check Point flaws. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 08:40 UTC. SecurityOnline. Critical flaws CVE-2026-42271/50751 exploited in Zlibrary mirrors. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 08:40 UTC. SecurityOnline. Check Point VPN bug lets attackers hijack open source downloads. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 08:41 UTC. Security Affairs. CISA Flags Critical Flaws in LiteLLM and Check Point VPN Gateways. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 10:20 UTC. SecurityOnline. Check Point VPN flaw under attack as Google slashes AI Plus price. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 10:20 UTC. SecurityOnline. LiteLLM, Check Point Flaws Hit as MagicAd Trojan Surges. Cites a CVE in CISA KEV.
  • Tue 9 Jun, 15:30 UTC. SOCRadar. CISA warns of exploits in LiteLLM and Check Point VPN flaws. Cites a CVE in CISA KEV.
  • Fri 19 Jun, 02:20 UTC. SecurityOnline. LiteLLM bug lets attackers bypass auth via Host header, CVSS 9.5.
  • Tue 1 Sep, 19:11 UTC. SecurityOnline. CVE-2026-35029 Exploited for Full LiteLLM Server Takeover.
  • Thu 10 Sep, 09:14 UTC. The Hacker News. LiteLLM Flaw Exposes AI Gateway Keys and Cloud Credentials.
  • Wed 30 Sep, 15:01 UTC. Google Cloud, its first report on the story. Google Warns N Day Flaws Are Driving a Surge in Exploitation. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 11:36 UTC. Infosecurity, its first report on the story. LiteLLM flaws could hand attackers admin access and expose AI keys.
  • Fri 23 Oct, 18:36 UTC. The Hacker News. AI Agents Power Ransomware Affiliates’ Attacks on Edge Devices. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 37 articles as a list
  1. Wed 29 AprDay 03
    1. LiteLLM SQL flaw CVE‑2026‑42208 exploited hours after disclosure06:19 · The Hacker News · First report · Exploited CVE · Known exploited CVE
    2. LiteLLM SQL injection flaw (CVE-2026-42208) exposes API keys13:22 · SecurityWeek · Known exploited CVE
    3. LiteLLM flaw CVE-2026-42208 exploited within hours of disclosure21:11 · Security Affairs · Known exploited CVE

  2. Quiet for 5 days

    Mon 4 MayDay 51
    1. Dark web lists WhatsApp data, Indian bank VPN for sale15:32 · SOCRadar · Picked up again · Known exploited CVE

  3. Quiet for 4 days

    Fri 8 MayDay 93
    1. CISA adds LiteLLM SQLi flaw to KEV as active exploits emerge17:31 · CISA · official · CISA alert · Picked up again · Known exploited CVE
    2. BerriAI LiteLLM Flaw Exposes Proxy Data, CISA Adds KEV Entry17:35 · CISA · official · Known exploited CVE
    3. CISA Adds One Known Exploited Vulnerability to Catalog19:01 · CISA · official · Known exploited CVE

  4. Quiet for 3 days

    Mon 11 MayDay 121
    1. CISA flags LiteLLM SQLi flaw exploited hours after disclosure10:28 · Security Affairs · Picked up again · Known exploited CVE

  5. Quiet for 4 weeks

    Mon 8 JunDay 401
    1. CISA warns of LiteLLM command injection flaw CVE-2026-4227119:54 · CISA · official · Picked up again · Known exploited CVE
  6. Tue 9 JunDay 4122
    1. Unveils AI Powered iOS 27 and macOS 27 Amid Critical CVE Alerts00:50 · SecurityOnline · Known exploited CVE
    2. Sovereign Intelligence: Apple Reimagines Siri with Gemini Core Integration at WWDC 202600:50 · SecurityOnline · Known exploited CVE
    3. Malicious PyPI Package Wave Spreads Evolving Supply Chain Attacks00:50 · SecurityOnline · Known exploited CVE
    Show 19 more from 9 Jun
    1. New Chrome Security Update Addresses Critical V8 Exploit in the Wild00:50 · SecurityOnline · Known exploited CVE
    2. CISA Active Exploit Catalog Expands with Critical Gateway Flaws00:51 · SecurityOnline · Known exploited CVE
    3. CISA warns of LiteLLM command injection flaw CVE-2026-4227101:48 · CISA · official · Known exploited CVE
    4. Critical Flaws Hit LiteLLM Check Point and TP Link Devices03:01 · SecurityOnline · Known exploited CVE
    5. Apache HTTP Server 2.4.68 fixes critical bugs to protect systems03:01 · SecurityOnline · Known exploited CVE
    6. Sovereign Synthesis: Apple Unveils Gemini-Powered Siri AI and macOS Golden Gate03:02 · SecurityOnline · Known exploited CVE
    7. Pragmatic Refinement: Apple Rebalances Aesthetics and Performance at WWDC 202603:02 · SecurityOnline · Known exploited CVE
    8. Apache MINA Patches Critical Framework Vulnerabilities03:02 · SecurityOnline
    9. Check Point VPN flaw hits as OpenAI files for $1 trillion IPO05:15 · SecurityOnline · Known exploited CVE
    10. Check Point VPN exploit active as Apple Notes adds Markdown export05:17 · SecurityOnline · Known exploited CVE
    11. Apple iOS 27 Adds AI Password Reset Amid Two Critical CVEs05:20 · SecurityOnline · Known exploited CVE
    12. LiteLLM flaw CVE-2026-42271 lets hackers execute code remotely07:00 · The Hacker News · Known exploited CVE
    13. Microsoft updates OneDrive policy amid LiteLLM, Check Point flaws08:40 · SecurityOnline · Known exploited CVE
    14. Critical flaws CVE-2026-42271/50751 exploited in Zlibrary mirrors08:40 · SecurityOnline · Known exploited CVE
    15. Check Point VPN bug lets attackers hijack open source downloads08:40 · SecurityOnline · Known exploited CVE
    16. CISA Flags Critical Flaws in LiteLLM and Check Point VPN Gateways08:41 · Security Affairs · Known exploited CVE
    17. Check Point VPN flaw under attack as Google slashes AI Plus price10:20 · SecurityOnline · Known exploited CVE
    18. LiteLLM, Check Point Flaws Hit as MagicAd Trojan Surges10:20 · SecurityOnline · Known exploited CVE
    19. CISA warns of exploits in LiteLLM and Check Point VPN flaws15:30 · SOCRadar · Known exploited CVE

  7. Quiet for 9 days

    Fri 19 JunDay 511
    1. LiteLLM bug lets attackers bypass auth via Host header, CVSS 9.502:20 · SecurityOnline · Picked up again

  8. Quiet for 11 weeks

    Tue 1 SepDay 1251
    1. CVE-2026-35029 Exploited for Full LiteLLM Server Takeover19:11 · SecurityOnline · Picked up again

  9. Quiet for 9 days

    Thu 10 SepDay 1341
    1. LiteLLM Flaw Exposes AI Gateway Keys and Cloud Credentials09:14 · The Hacker News · Picked up again

  10. Quiet for 3 weeks

    Wed 30 SepDay 1541
    1. Google Warns N Day Flaws Are Driving a Surge in Exploitation15:01 · Google Cloud · Picked up again · Known exploited CVE

  11. Quiet for 2 weeks

    Thu 15 OctDay 1691
    1. LiteLLM flaws could hand attackers admin access and expose AI keys11:36 · Infosecurity · Picked up again

  12. Quiet for 8 days

    Fri 23 OctDay 1771
    1. AI Agents Power Ransomware Affiliates’ Attacks on Edge Devices18:36 · The Hacker News · Picked up again · Known exploited CVE

All CVEs in coverage8

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-42271Exploited

    BerriAI LiteLLM Command Injection Vulnerability

    8.7High91% EPSS · 25 articles
  • CVE-2026-42208Exploited

    BerriAI LiteLLM SQL Injection Vulnerability

    9.3Critical89% EPSS · 9 articles
  • CVE-2026-59822Exploited

    BerriAI LiteLLM Improper Authentication Vulnerability

    8.8High0.8% EPSS · 1 article
  • CVE-2026-35029

    BerriAI litellm vulnerability

    8.8High39% EPSS · 2 articles
  • CVE-2026-40217

    BerriAI LiteLLM vulnerability

    8.8High16% EPSS · 1 article
  • CVE-2026-49468

    LiteLLM: Authentication Bypass via Host Header Injection

    9.5Critical3.0% EPSS · 1 article
  • CVE-2026-59821

    LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

    2.1Low0.9% EPSS · 1 article
  • CVE-2026-59823

    LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy

    5.3Medium0.4% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in