Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

BerriAI LiteLLM actively exploited command injection (CVE-2026-42271)

Vulnerability
First reported
Last updated
Happening score
H score 51
1 unique sources, 1 articles

Summary

Hide ▲

CVE-2026-42271 in BerriAI LiteLLM was added to CISA's KEV catalog after evidence of active exploitation, creating remote command-execution risk for affected proxy deployments. The command injection flaw impacts LiteLLM Python package versions >= 1.74.2 < 1.83.7 and can let an authenticated user run arbitrary commands on the host. Version 1.83.7 patches the issue by restricting the vulnerable endpoints to the PROXY_ADMIN role.

Related Happenings

LiteLLM pre-auth SQL injection (CVE-2026-42208)

Vulnerability
First: 29.04.2026 00:07 Last: 29.04.2026 00:07 Sources 1

About this happening: **LiteLLM**'s **CVE-2026-42208** pre-auth SQL injection is being actively exploited, putting proxy databases and stored secrets at risk. The flaw can be triggered without authenti...

Latest development: 29.04.2026 08:34

BerriAI released `1.83.7-stable` on April 19, 2026 to address `CVE-2026-42208`, a critical `SQL injection` in LiteLLM proxy API key checks, and recommended setting `disable_error_logs: true` as a workaround when immediate upgrading is not possible.

Open Happening

LiteLLM Python package hit by network compromise linked to TeamPCP

Incident
First: 25.03.2026 00:29 Last: 25.03.2026 00:29 Sources 1

About this happening: The **LiteLLM** Python package was compromised on **PyPI** after attackers published malicious **1.82.7** and **1.82.8** releases, putting downstream installs at risk of **credent...

Open Happening

Timeline

  1. 09.06.2026 09:26 2 articles · 2h ago

    CISA adds LiteLLM CVE-2026-42271 to KEV catalog after active exploitation

    Initial Disclosure

    CISA added CVE-2026-42271 in BerriAI LiteLLM to the KEV catalog after evidence of active exploitation. The command-injection flaw affects LiteLLM Python package versions >= 1.74.2 and < 1.83.7, where authenticated users could run arbitrary commands through POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list. BerriAI said version 1.83.7 requires the PROXY_ADMIN role for those test endpoints, and Horizon3.ai said CVE-2026-42271 can be chained with CVE-2026-48710 in Starlette versions <= 1.0.0 to bypass authentication and achieve unauthenticated remote code execution.

    Show sources
    Open in new tab