Known Vulnerabilities for products from Litellm
Listed below are 9 of the newest known vulnerabilities associated with the vendor "Litellm".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49468 json | Not Provided | 2026-06-22 | 2026-06-22 | |
| CVE-2026-47102 json | LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correc... | Not Provided | 2026-05-21 | 2026-06-11 |
| CVE-2026-47101 json | LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does ... | Not Provided | 2026-05-21 | 2026-06-11 |
| CVE-2026-42271 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1... | Not Provided | 2026-05-08 | 2026-06-09 |
| CVE-2026-42208 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version ... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2026-42203 json | Not Provided | 2026-05-08 | 2026-05-09 | |
| CVE-2026-40217 json | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_c... | Not Provided | 2026-04-10 | 2026-04-27 |
| CVE-2026-35030 json | Not Provided | 2026-04-06 | 2026-04-07 | |
| CVE-2026-35029 json | Not Provided | 2026-04-06 | 2026-04-29 | |
| CVE-2026-34936 json | Not Provided | 2026-04-03 | 2026-04-06 | |
| CVE-2026-33634 json | Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.6... | Not Provided | 2026-03-23 | 2026-03-30 |