{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "berriai litellm: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/berriai--litellm/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/berriai--litellm/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114612/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114612/",
   "title": "CVE-2026-114612 disclosed",
   "content_text": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session tokens, allowing an authenticated internal user to have crafted metadata containing a forged administrator credential encrypted and returned by the API-key flow. Replaying that ciphertext as a bearer token causes the proxy to trust the forged proxy administrator identity, permitting administrative access and arbitrary commands through the MCP stdio endpoint. Versions 1.87.0 through 1.90.x require EXPERIMENTAL_UI_LOGIN to be enabled, while versions after 1.91.0 are exploitable in the default configuration. This issue was fixed in LiteLLM 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2.",
   "date_published": "2026-10-22T18:01:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-93355/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-93355/",
   "title": "CVE-2026-93355 disclosed",
   "content_text": "LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the email_verified claim. Attackers can present a token with an unverified email address matching a victim's account to inherit the victim's role, including proxy_admin privileges, and permanently overwrite the victim's stored identity binding to retain persistent unauthorized access to administrative endpoints exposing API keys and user management.",
   "date_published": "2026-09-28T19:26:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-93355/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-93355/",
   "title": "CVE-2026-93355 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: python-litellm 1.103.0-1.1.",
   "date_published": "2026-09-28T19:26:01Z"
  }
 ]
}