WID-SEC-W-2026-3864

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

LiteLLM: Mehrere Schwachstellen

view advisory published 2026-10-11

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in LiteLLM ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-108575USmedium6.3—
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The man…
CVE-2026-108574USmedium4.3—
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_e…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan