Patchfirst: BerriAI vulnerabilitieshttps://patchfirst.co/vendor/berriai/New and newly exploited BerriAI CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-114612: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) formathttps://patchfirst.co/cve/CVE-2026-114612/CVE-2026-114612Thu, 22 Oct 2026 00:00:00 GMTBerriAI · litellm. Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 9.9 CRITICAL. Priority 13.8 of 100.[KEV] CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-59822/CVE-2026-59822#kevWed, 02 Sep 2026 00:00:00 GMTBerriAI · LiteLLM. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 57.7% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 65.3 of 100.kevpublic-exploitT1190T1078CVE-2026-59821: LiteLLM: Custom Code Guardrails production endpoints bypass code safety checkshttps://patchfirst.co/cve/CVE-2026-59821/CVE-2026-59821Wed, 08 Jul 2026 00:00:00 GMTBerriAI · litellm. Not in CISA KEV. EPSS 0.9% (higher than 59.8% of CVEs). CVSS 2.1 LOW. Priority 54.1 of 100.[KEV] CVE-2026-42271: BerriAI LiteLLM Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-42271/CVE-2026-42271#kevMon, 08 Jun 2026 00:00:00 GMTBerriAI · LiteLLM. In CISA KEV since 2026-06-08. ENISA EUVD lists it as exploited. EPSS 91.4% (higher than 99.81% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.1 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-42208/CVE-2026-42208#kevFri, 08 May 2026 00:00:00 GMTBerriAI · LiteLLM. In CISA KEV since 2026-05-08. ENISA EUVD lists it as exploited. EPSS 89.4% (higher than 99.78% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1565.001 Stored Data Manipulation. Priority 74.8 of 100.kevpublic-exploitT1190T1005T1565.001CVE-2026-40217: LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…https://patchfirst.co/cve/CVE-2026-40217/CVE-2026-40217Fri, 10 Apr 2026 00:00:00 GMTBerriAI · LiteLLM. Not in CISA KEV. EPSS 15.5% (higher than 96.8% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 73.2 of 100.public-exploitCVE-2026-35029: LiteLLM affected by privilege escalation via unrestricted proxy configuration endpointhttps://patchfirst.co/cve/CVE-2026-35029/CVE-2026-35029Mon, 06 Apr 2026 00:00:00 GMTBerriAI · litellm. Not in CISA KEV. EPSS 38.6% (higher than 98.6% of CVEs). CVSS 8.7 HIGH. Public exploit code exists. Priority 73.7 of 100.public-exploitCVE-2024-6587: SSRF in berriai/litellmhttps://patchfirst.co/cve/CVE-2024-6587/CVE-2024-6587Fri, 13 Sep 2024 00:00:00 GMTberriai · berriai/litellm. Not in CISA KEV. EPSS 34.4% (higher than 98.4% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 64.9 of 100.public-exploit