All vulnerabilities
CVE-2026-42271GHSA-v4p8-mg3p-g94gPYSEC-2026-2599

BerriAI LiteLLM Command Injection Vulnerability

BerriAI LiteLLMPyPILibraries & packages
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationExploited in the wildAdded to KEV 8 Jun 2026CISA KEV
Exploit odds (EPSS)92.6%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.83.7Fixed versionOSV
Federal deadline22 Jun 2026Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 1.83.7litellm, PyPIOSVpip install "litellm>=1.83.7"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 21 Apr 2026Exploit code publicMetasploit
  2. 8 May 2026, 03:35 UTCPublishedCVE List
  3. 8 Jun 2026Added to CISA KEVCISA KEV
  4. 30 Sep 2026, 14:00 UTCFirst reported exploitedGoogle Threat Intelligence

Public exploit code and templates 2

  • Exploit moduleBerriAI LiteLLM Proxy MCP Test Endpoint Command Execution 21 Apr 2026Metasploit
  • Scanner templateLiteLLM - Command InjectionNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.

Text from CVE List

Affected versions 53

  • litellmaffected: >= 1.74.2, < 1.83.7CVE List
  • litellm, pip>=1.74.2, <1.83.7GitHub
  • litellm, PyPIfrom 1.74.2, fixed in 1.83.7OSV
  • litellm, PyPI1.74.12OSV
  • litellm, PyPI1.74.14OSV
  • litellm, PyPI1.74.15OSV
  • litellm, PyPI1.74.15.post1OSV
  • litellm, PyPI1.74.15.post2OSV
  • litellm, PyPI1.74.2OSV
  • litellm, PyPI1.74.3OSV
  • litellm, PyPI1.74.3.post1OSV
  • litellm, PyPI1.74.3rc1OSV
  • litellm, PyPI1.74.3rc2OSV
  • litellm, PyPI1.74.3rc3OSV
  • litellm, PyPI1.74.4OSV
  • litellm, PyPI1.74.4.dev1OSV
  • litellm, PyPI1.74.6OSV
  • litellm, PyPI1.74.7OSV
  • litellm, PyPI1.74.7.post1OSV
  • litellm, PyPI1.74.7.post2OSV
  • litellm, PyPI1.74.7rc1OSV
  • litellm, PyPI1.74.8OSV
  • litellm, PyPI1.74.8.dev2OSV
  • litellm, PyPI1.74.9OSV
  • litellm, PyPI1.74.9.dev1OSV
  • litellm, PyPI1.74.9.dev2OSV
  • litellm, PyPI1.74.9.post1OSV
  • litellm, PyPI1.74.9.post2OSV
  • litellm, PyPI1.75.0OSV
  • litellm, PyPI1.75.2OSV
  • litellm, PyPI1.75.3OSV
  • litellm, PyPI1.75.4OSV
  • litellm, PyPI1.75.5.post1OSV
  • litellm, PyPI1.75.5.post2OSV
  • litellm, PyPI1.75.6OSV
  • litellm, PyPI1.75.7OSV
  • litellm, PyPI1.75.8OSV
  • litellm, PyPI1.75.9OSV
  • litellm, PyPI1.76.0OSV
  • litellm, PyPI1.76.1OSV
  • litellm, PyPI1.76.2OSV
  • litellm, PyPI1.76.3OSV
  • litellm, PyPI1.77.0OSV
  • litellm, PyPI1.77.1OSV
  • litellm, PyPI1.77.2.post1OSV
  • litellm, PyPI1.77.3OSV
  • litellm, PyPI1.77.4OSV
  • litellm, PyPI1.77.4.dev1OSV
  • litellm, PyPI1.77.5OSV
  • litellm, PyPI1.77.7OSV
  • litellm, PyPI1.78.0OSV
  • litellm, PyPI1.78.0rc2OSV
  • litellm, PyPI1.78.2OSV

References 10