CVE-2026-42271: Berri AI LiteLLM Command Injection Vulnerability
BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- BerriAICVE-2026-42271
- Related
- CVE-2026-59822: Berri AI LiteLLM Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026CVE-2026-42208: Berri AI LiteLLM SQL Injection Vulnerability Known Exploited Vulnerabilities · May 08, 2026Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026