litellm litellm

Name: litellm litellm
Brand: litellm

productUS

cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical13high4medium0low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-42271US	high8.8OT critical	91.4% (100th)	KEV	1.83.7	2026-05-08	1.74.2 → 1.83.7
CVE-2026-42208US	critical9.8OT critical	89.4% (100th)	KEV	1.83.7	2026-05-08	1.81.16 → 1.83.7
CVE-2026-33634US	high8.8OT critical	59.7% (99th)	KEV	no fix	2026-03-23	2 versions
CVE-2026-59822US	high8.2OT critical	0.84% (57th)	KEV	1.84.0	2026-07-08	< 1.84.0
CVE-2026-35029US	high8.8OT high	38.6% (99th)	Exploit	1.83.0	2026-04-06	< 1.83.0
CVE-2026-40217US	—	15.5% (97th)	Exploit	no fix	2026-04-10	≤ 2026-04-08
CVE-2026-49468US	critical9.8	3.03% (87th)	Exploit	1.84.0	2026-06-22	< 1.84.0
CVE-2026-47101US	—OT elevated	1.19% (68th)	Exploit	1.83.14	2026-05-21	< 1.83.14
CVE-2026-47102US	—OT elevated	0.65% (51st)	Exploit	1.83.10	2026-05-21	< 1.83.10
CVE-2026-35030US	—	0.63% (50th)	Exploit	1.83.0	2026-04-06	< 1.83.0
CVE-2024-4890US	medium4.9	0.56% (46th)	Exploit	no fix	2024-06-06	= 1.27.14
CVE-2026-42203US	high8.8	0.37% (31st)	Exploit	1.83.7	2026-05-08	1.80.5 → 1.83.7
CVE-2025-45809US	—	0.29% (21st)	Exploit	no fix	2025-07-03	= 1.65.4
CVE-2024-6587US	high7.5	34.4% (98th)	—	no fix	2024-09-13	= 1.38.10
CVE-2024-6825US	—	1.65% (76th)	—	1.65.4	2025-03-20	2 versions
CVE-2024-2952US	—	1.27% (70th)	—	1.34.42	2024-04-10	< 1.34.42
CVE-2026-12773US	critical9.8	1.02% (63rd)	—	1.59.9	2026-06-21	< 1.59.9
CVE-2026-59821US	high7.2	0.90% (60th)	—	1.82.0	2026-07-08	2 versions
CVE-2024-5751US	critical9.8	0.88% (59th)	—	no fix	2024-06-27	= 1.35.8
CVE-2024-4889US	high7.2	0.86% (58th)	—	1.44.16	2024-06-06	< 1.44.16
CVE-2024-8984US	—	0.86% (58th)	—	1.65.4	2025-03-20	2 versions
CVE-2026-12795US	—OT elevated	0.80% (56th)	—	no fix	2026-06-21	≤ 1.82.2
CVE-2024-9606US	high7.5	0.77% (55th)	—	1.44.12	2025-03-20	< 1.44.12
CVE-2024-4888US	high8.1OT elevated	0.62% (49th)	—	1.35.19	2024-06-06	< 1.35.19
CVE-2026-59820US	medium6.5	0.59% (48th)	—	1.83.7	2026-07-08	2 versions
CVE-2026-59819US	medium4.9	0.57% (47th)	—	1.83.10	2026-07-08	2 versions
CVE-2026-12796US	—	0.57% (47th)	—	no fix	2026-06-21	≤ 1.82.2
CVE-2026-12770US	high8.8	0.57% (47th)	—	1.63.2	2026-06-21	< 1.63.2
CVE-2025-0330US	—	0.57% (47th)	—	no fix	2025-03-20	= 1.52.1
CVE-2026-12771US	high7.5	0.43% (37th)	—	1.82.3	2026-06-21	< 1.82.3
CVE-2024-5225US	high7.2	0.43% (37th)	—	no fix	2024-06-06	≤ 1.40.2
CVE-2026-12799US	—	0.43% (37th)	—	no fix	2026-06-21	≤ 1.82.2
CVE-2024-5710US	medium6.5OT elevated	0.41% (35th)	—	no fix	2024-06-27	= 1.34.34
CVE-2026-12798US	—	0.40% (34th)	—	no fix	2026-06-21	≤ 1.82.2
CVE-2026-12797US	—OT elevated	0.40% (34th)	—	no fix	2026-06-21	≤ 1.82.5
CVE-2026-12774US	—	0.40% (34th)	—	no fix	2026-06-21	≤ 1.82.2
CVE-2026-12772US	—	0.40% (34th)	—	1.82.3	2026-06-21	< 1.82.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')6 CVEs
CWE-285Improper Authorization4 CVEs
CWE-287Improper Authentication4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan