Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

BerriAI LiteLLM actively exploited command injection (CVE-2026-42271)

Vulnerability
First reported
Last updated
Happening score
H score 51
1 unique sources, 1 articles

Summary

Hide ▲

CVE-2026-42271 in BerriAI LiteLLM was added to CISA's KEV catalog after evidence of active exploitation, creating remote command-execution risk for affected proxy deployments. The command injection flaw impacts LiteLLM Python package versions >= 1.74.2 < 1.83.7 and can let an authenticated user run arbitrary commands on the host. Version 1.83.7 patches the issue by restricting the vulnerable endpoints to the PROXY_ADMIN role.

Related Happenings

LiteLLM proxy privilege-escalation and RCE chain (multiple vulnerabilities)

Vulnerability
H score37 First: 15.06.2026 19:39 Last: 15.06.2026 19:39 Sources 1

About this happening: LiteLLM proxy now has a disclosed three-CVE chain that lets a low-privilege user reach proxy_admin and run code on the server, putting provider keys and stored credent...

Open Happening

LiteLLM pre-auth SQL injection (CVE-2026-42208)

Vulnerability
H score43 First: 29.04.2026 00:07 Last: 29.04.2026 00:07 Sources 1

About this happening: LiteLLM's CVE-2026-42208 pre-auth SQL injection is being actively exploited, putting proxy databases and stored secrets at risk. The flaw can be triggered without authenti...

Latest development: 29.04.2026 08:34

BerriAI released `1.83.7-stable` on April 19, 2026 to address `CVE-2026-42208`, a critical `SQL injection` in LiteLLM proxy API key checks, and recommended setting `disable_error_logs: true` as a workaround when immediate upgrading is not possible.

Open Happening

LiteLLM Python package hit by network compromise linked to TeamPCP

Incident
H score60 First: 25.03.2026 00:29 Last: 25.03.2026 00:29 Sources 1

About this happening: The LiteLLM Python package was compromised on PyPI after attackers published malicious 1.82.7 and 1.82.8 releases, putting downstream installs at risk of credent...

Open Happening

Timeline

  1. 09.06.2026 09:26 2 articles · 1mo ago

    CISA adds LiteLLM CVE-2026-42271 to KEV catalog after active exploitation

    Initial Disclosure

    CISA added CVE-2026-42271 in BerriAI LiteLLM to the KEV catalog after evidence of active exploitation. The command-injection flaw affects LiteLLM Python package versions >= 1.74.2 and < 1.83.7, where authenticated users could run arbitrary commands through POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list. BerriAI said version 1.83.7 requires the PROXY_ADMIN role for those test endpoints, and Horizon3.ai said CVE-2026-42271 can be chained with CVE-2026-48710 in Starlette versions <= 1.0.0 to bypass authentication and achieve unauthenticated remote code execution.

    Show sources
    Open in new tab