Open Source LiteLLM

Name: Open Source LiteLLM
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical6high4medium0low

updated 2026-10-26

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-42271US	high8.8OT critical	92.6% (100th)	KEV	1.83.7	2026-05-08	2 versions
CVE-2026-42208US	critical9.8OT critical	5.77% (93rd)	KEV	1.83.7	2026-05-08	< 1.83.7
CVE-2026-59822US	high8.2OT critical	0.84% (57th)	KEV	1.84.0	2026-07-08	4 versions
CVE-2026-30623US	—	5.00% (92nd)	Exploit	1.83.6-nightly	2026-07-15	2 versions
CVE-2026-35029US	high8.8OT high	3.98% (90th)	Exploit	1.83.0-nightly	2026-04-06	< 1.83.0-nightly
CVE-2026-40217US	—	3.40% (89th)	Exploit	1.83.10	2026-04-10	< 1.83.10
CVE-2026-49468US	critical9.8	3.03% (87th)	Exploit	1.84.0	2026-06-22	< 1.84.0
CVE-2026-47101US	—OT elevated	1.33% (71st)	Exploit	1.83.14	2026-05-21	2 versions
CVE-2026-47102US	—OT elevated	0.82% (57th)	Exploit	1.83.10	2026-05-21	< 1.83.10
CVE-2026-42203US	high8.8	0.66% (51st)	Exploit	1.83.7	2026-05-08	< 1.83.7
CVE-2026-59821US	high7.2	0.90% (59th)	—	1.82.0-stable	2026-07-08	< 1.82.0-stable
CVE-2026-59820US	medium6.5	0.59% (47th)	—	1.82.0-stable	2026-07-08	2 versions
CVE-2026-59819US	medium4.9	0.57% (47th)	—	1.83.7-stable	2026-07-08	3 versions
CVE-2026-89032US	high7.7OT elevated	0.27% (19th)	—	1.101.0-rc.1	2026-09-25	< 1.101.0-rc.1
CVE-2026-108574US	medium4.3	0.24% (14th)	—	no fix	2026-10-11	2 versions
CVE-2026-108575US	medium6.3	0.20% (10th)	—	no fix	2026-10-11	≤ 1.94.0

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-285Improper Authorization2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-1336Improper Neutralization of Special Elements Used in a Template Engine1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.