{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: BerriAI vulnerabilities","home_page_url":"https://patchfirst.co/vendor/berriai/","feed_url":"https://patchfirst.co/feed/vendor/berriai.json","description":"New and newly exploited BerriAI CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-114612","url":"https://patchfirst.co/cve/CVE-2026-114612/","title":"CVE-2026-114612: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format","content_text":"BerriAI · litellm. Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 9.9 CRITICAL. Priority 13.8 of 100.","summary":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:18:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.8,"kev":null,"epss":{"score":0.00319,"percentile":0.24888},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"BerriAI","product":"litellm","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-59822#kev","url":"https://patchfirst.co/cve/CVE-2026-59822/","title":"[KEV] CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability","content_text":"BerriAI · LiteLLM. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 57.7% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 65.3 of 100.","summary":"BerriAI LiteLLM Improper Authentication Vulnerability","date_published":"2026-09-02T00:00:00.000Z","date_modified":"2026-10-25T17:10:00.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":65.3,"kev":{"dateAdded":"2026-09-02","ransomware":false},"epss":{"score":0.00836,"percentile":0.57687},"cvss":{"score":8.2,"severity":"HIGH","version":"3.1"},"vendor":"BerriAI","product":"LiteLLM","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-59821","url":"https://patchfirst.co/cve/CVE-2026-59821/","title":"CVE-2026-59821: LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","content_text":"BerriAI · litellm. Not in CISA KEV. EPSS 0.9% (higher than 59.8% of CVEs). CVSS 2.1 LOW. Priority 54.1 of 100.","summary":"LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","date_published":"2026-07-08T00:00:00.000Z","date_modified":"2026-07-09T14:38:09.000Z","tags":[],"_patchfirst":{"reason":"published","priority":54.1,"kev":null,"epss":{"score":0.00904,"percentile":0.59755},"cvss":{"score":2.1,"severity":"LOW","version":"4.0"},"vendor":"BerriAI","product":"litellm","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42271#kev","url":"https://patchfirst.co/cve/CVE-2026-42271/","title":"[KEV] CVE-2026-42271: BerriAI LiteLLM Command Injection Vulnerability","content_text":"BerriAI · LiteLLM. In CISA KEV since 2026-06-08. ENISA EUVD lists it as exploited. EPSS 91.4% (higher than 99.81% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.1 of 100.","summary":"BerriAI LiteLLM Command Injection Vulnerability","date_published":"2026-06-08T00:00:00.000Z","date_modified":"2026-10-26T20:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":84.1,"kev":{"dateAdded":"2026-06-08","ransomware":false},"epss":{"score":0.91445,"percentile":0.99812},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"BerriAI","product":"LiteLLM","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-42208#kev","url":"https://patchfirst.co/cve/CVE-2026-42208/","title":"[KEV] CVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerability","content_text":"BerriAI · LiteLLM. In CISA KEV since 2026-05-08. ENISA EUVD lists it as exploited. EPSS 89.4% (higher than 99.78% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1565.001 Stored Data Manipulation. Priority 74.8 of 100.","summary":"BerriAI LiteLLM SQL Injection Vulnerability","date_published":"2026-05-08T00:00:00.000Z","date_modified":"2026-10-26T20:10:00.000Z","tags":["kev","public-exploit","T1190","T1005","T1565.001"],"_patchfirst":{"reason":"kev","priority":74.8,"kev":{"dateAdded":"2026-05-08","ransomware":false},"epss":{"score":0.8942,"percentile":0.99785},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"BerriAI","product":"LiteLLM","techniqueIds":["T1190","T1005","T1565.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-40217","url":"https://patchfirst.co/cve/CVE-2026-40217/","title":"CVE-2026-40217: LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…","content_text":"BerriAI · LiteLLM. Not in CISA KEV. EPSS 15.5% (higher than 96.8% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 73.2 of 100.","summary":"LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…","date_published":"2026-04-10T00:00:00.000Z","date_modified":"2026-07-15T01:01:14.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.2,"kev":null,"epss":{"score":0.15532,"percentile":0.96825},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"BerriAI","product":"LiteLLM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-35029","url":"https://patchfirst.co/cve/CVE-2026-35029/","title":"CVE-2026-35029: LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint","content_text":"BerriAI · litellm. Not in CISA KEV. EPSS 38.6% (higher than 98.6% of CVEs). CVSS 8.7 HIGH. Public exploit code exists. Priority 73.7 of 100.","summary":"LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint","date_published":"2026-04-06T00:00:00.000Z","date_modified":"2026-07-15T01:03:19.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.7,"kev":null,"epss":{"score":0.38613,"percentile":0.98577},"cvss":{"score":8.7,"severity":"HIGH","version":"4.0"},"vendor":"BerriAI","product":"litellm","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-6587","url":"https://patchfirst.co/cve/CVE-2024-6587/","title":"CVE-2024-6587: SSRF in berriai/litellm","content_text":"berriai · berriai/litellm. Not in CISA KEV. EPSS 34.4% (higher than 98.4% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 64.9 of 100.","summary":"SSRF in berriai/litellm","date_published":"2024-09-13T00:00:00.000Z","date_modified":"2024-09-13T16:53:11.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.9,"kev":null,"epss":{"score":0.34375,"percentile":0.98409},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"berriai","product":"berriai/litellm","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}