BerriAI

4 results · Clear filters · Feed

• High 8.8
  CVE-2026-59822 Exploited Public exploit

  LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

  LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallbac…

  BerriAI litellm litellm PyPI
  Jul 8, 2026

  KEV Sep 2, 2026
• Critical 9.3
  CVE-2026-42208 Exploited Public exploit Scanner template EPSS 89%

  LiteLLM: SQL injection in Proxy API key verification

  LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing i…

  BerriAI litellm airflow-3 litellm Wolfi PyPI
  May 8, 2026

  KEV May 8, 2026
• High 8.7
  CVE-2026-42271 Exploited Public exploit Scanner template EPSS 91%

  LiteLLM: Authenticated command execution via MCP stdio test endpoints

  LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/lis…

  BerriAI litellm airflow-3 litellm Wolfi PyPI
  May 8, 2026

  KEV Jun 8, 2026
• Critical 9.4
  CVE-2026-33634 Exploited Public exploit EPSS 60%

  Trivy ecosystem supply chain briefly compromised

  Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in…

  BerriAI Aqua Security team-telnyx litellm Go GitHub Actions
  Mar 23, 2026

  KEV Mar 26, 2026