Vendor

BerriAI

3 of 8 BerriAI CVEs in Patchfirst (38%) are in of vulnerabilities exploited in the wild.

CVEs: 8
In CISA KEV: 338%
Known ransomware use: 0
Median days to KEV: 31; from publication
Latest KEV listing: 2 Sep 2026

Watch BerriAI Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
LiteLLM In KEV: 3 CVEs: 4
litellm In KEV: 0 CVEs: 3
berriai/litellm In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with BerriAI CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 3
T1059Command and Scripting Interpreter CVEs: 1
T1005Data from Local System CVEs: 1
T1565.001Stored Data Manipulation CVEs: 1
T1078Valid Accounts CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/berriai.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are BerriAI CVEs linked to the technique. Each link’s provenance is on the CVE page.

BerriAI CVEs

8 CVEs, by priority

CVE-2026-42271BerriAI LiteLLM Command Injection Vulnerability
BerriAI · LiteLLMKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
91.4%Top 0.19%
84.1priority
CVE-2026-42208BerriAI LiteLLM SQL Injection Vulnerability
BerriAI · LiteLLMKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1005Data from Local System+1 more
89.4%Top 0.21%
74.8priority
CVE-2026-35029LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint
BerriAI · litellmPublic exploitHigh · 8.7
38.6%Top 1.4%
73.7priority
CVE-2026-40217LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…
BerriAI · LiteLLMPublic exploitHigh · 8.8
15.5%Top 3.2%
73.2priority
CVE-2026-59822BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI · LiteLLMKEVPublic exploitHigh · 8.2T1190Exploit Public-Facing Application T1078Valid Accounts
0.8%Top 42%
65.3priority
CVE-2024-6587SSRF in berriai/litellm
berriai · berriai/litellmPublic exploitHigh · 7.5
34.4%Top 1.6%
64.9priority
CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
BerriAI · litellmLow · 2.1
0.9%Top 40%
54.1priority
CVE-2026-114612LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
BerriAI · litellmCritical · 9.9
0.3%Top 75%
13.8priority