Obsidian Security Discovers Critical LiteLLM Vulnerabilities
Obsidian Security, a cybersecurity company, disclosed a chain of three critical vulnerabilities in LiteLLM that allow low-privilege users to take over AI…
Tag: LiteLLM
LiteLLM Authorization Bypass via Allowed Routes
CVE-2026-47101 is an authorization bypass vulnerability in LiteLLM where the allowed_routes field is not validated against user roles, allowing low-privilege users to…
LiteLLM Privilege Escalation via User Update Endpoint
CVE-2026-47102 is a privilege escalation vulnerability in LiteLLM's /user/update endpoint, which does not restrict field updates, allowing users to self-promote to proxy_admin…
CVE-2026-42271 — BerriAI LiteLLM Command Injection Vulnerability
BerriAI LiteLLM Command Injection Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…
CVE-2026-42208 — BerriAI LiteLLM SQL Injection Vulnerability
BerriAI LiteLLM SQL Injection Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…