LLM frameworks · BerriAI
LiteLLM
Proxy and SDK that puts 100+ LLM APIs behind one interface.
3Advisories
3critical
0high
0medium
2026-08-27Latest
Timeline · advisories per quarter
22026 Q2
12026 Q3
Named in sources
Reported for LiteLLM
01. CVE-2026-37004: LiteLLM vulnerable to server-side template injection in the /prompts/test endpointBerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment. LiteLLM 2026-08-27 02. CVE-2026-49468: LiteLLM: Authentication Bypass via Host Header InjectionA Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. LiteLLM 2026-06-16 03. CVE-2026-42208: LiteLLM has SQL Injection in Proxy API key verificationA database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. LiteLLM 2026-04-24
LiteLLM 2026-08-27 02. CVE-2026-49468: LiteLLM: Authentication Bypass via Host Header InjectionA Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. LiteLLM 2026-06-16 03. CVE-2026-42208: LiteLLM has SQL Injection in Proxy API key verificationA database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. LiteLLM 2026-04-24