Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2026-42271: Berri AI LiteLLM Command Injection Vulnerability

BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
BerriAICVE-2026-42271
Related
CVE-2026-59822: Berri AI LiteLLM Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026
CVE-2026-42208: Berri AI LiteLLM SQL Injection Vulnerability Known Exploited Vulnerabilities · May 08, 2026