B
Vendor security profile2 actively exploited CVEs
BerriAI
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV2
Public exploit5
Patch rate%67
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
3
0
1
0
3
2
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High5 (56%)
Medium3 (33%)
Patch and exploitation view
%67
Verified patch
%22
CISA KEV
%56
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
5.3
CVE-2026-108575
BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization
B
Patch status unknown
5.3
CVE-2026-108574
BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
B
Patch verified
7.6
CVE-2026-93355
LiteLLM Weak JWT Authentication via Email-Based User Lookup
B
Patch status unknownEPSS %0
8.7
CVE-2026-89032
BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
B
Patch verifiedEPSS %0
5.3
CVE-2026-59823
LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy
B
Patch status unknownEPSS %0
8.8
CVE-2026-59822 Actively exploited
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
B
Patch verifiedEPSS %1
8.7
CVE-2026-47102
LiteLLM < 1.83.10 Privilege Escalation via User Update
B
Patch verifiedEPSS %1
8.7
CVE-2026-47101
LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
B
Patch verifiedEPSS %1
9.8
CVE-2026-42208 Actively exploited
SQL injection in Litellm
L
Patch verifiedEPSS %6