{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "berriai litellm: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/berriai--litellm/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/berriai--litellm/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114612/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114612/",
   "title": "CVE-2026-114612 disclosed",
   "content_text": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session tokens, allowing an authenticated internal user to have crafted metadata containing a forged administrator credential encrypted and returned by the API-key flow. Replaying that ciphertext as a bearer token causes the proxy to trust the forged proxy administrator identity, permitting administrative access and arbitrary commands through the MCP stdio endpoint. Versions 1.87.0 through 1.90.x require EXPERIMENTAL_UI_LOGIN to be enabled, while versions after 1.91.0 are exploitable in the default configuration. This issue was fixed in LiteLLM 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2.",
   "date_published": "2026-10-22T18:01:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-108575/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-108575/",
   "title": "CVE-2026-108575 disclosed",
   "content_text": "A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The manipulation of the argument api_key leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
   "date_published": "2026-10-11T12:00:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-108574/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-108574/",
   "title": "CVE-2026-108574 disclosed",
   "content_text": "A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_endpoints.py of the component Spend Tracking. Executing a manipulation of the argument session_id can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 1.96.0 can resolve this issue. This patch is called 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b. The affected component should be upgraded.",
   "date_published": "2026-10-11T11:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-93355/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-93355/",
   "title": "CVE-2026-93355 disclosed",
   "content_text": "LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the email_verified claim. Attackers can present a token with an unverified email address matching a victim's account to inherit the victim's role, including proxy_admin privileges, and permanently overwrite the victim's stored identity binding to retain persistent unauthorized access to administrative endpoints exposing API keys and user management.",
   "date_published": "2026-09-28T19:26:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-93355/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-93355/",
   "title": "CVE-2026-93355 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: python-litellm 1.103.0-1.1.",
   "date_published": "2026-09-28T19:26:01Z"
  }
 ]
}