LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor1 exploited in the wild

Litellm

7 CVEs published in the last four months and 3 stories. Exploited flaws first.

Critical1
High6
Medium0
Exploited (KEV)1

Patch these first

CVECVSSSeverityProductSummaryPublished
CVE-2026-59822exploited8.2highlitellmLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.111d ago

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-494689.8criticallitellmLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.126d ago
CVE-2026-471028.8highlitellmLiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint.158d ago
CVE-2026-471018.8highlitellmLiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their158d ago
CVE-2026-59822exploited8.2highlitellmLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.111d ago
CVE-2026-127957.3highlitellmA vulnerability was determined in BerriAI litellm up to 1.82.2.128d ago
CVE-2026-127737.3highlitellmA weakness has been identified in BerriAI litellm up to 1.59.8.128d ago
CVE-2026-598217.2highlitellmLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.111d ago

Filter the full tracker by Litellm →

Our coverage of Litellm

breach

LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected

A supply-chain attack targeting LiteLLM, a popular open-source AI gateway and utility library, has led to the exposure of credentials across more than 2,000 code repositories, impacting a wide range of organizations, particularly in the technology, finance, and healthcare sectors. The threat actor group, identified as TeamPCP, compromised maintainer credentials for LiteLLM and published…

breach

Trivy, Not LiteLLM Behind the 2,500 Org Compromise

A recent report indicates that the compromise of approximately 2,500 organizations was primarily attributable to vulnerabilities or misconfigurations related to the security scanner Trivy, rather than the malicious LiteLLM packages initially suspected. This finding shifts the focus of the incident, suggesting a different primary vector for the widespread exposure.

ai

153GB of stolen credentials surface after LiteLLM supply chain attack

A substantial archive of 153GB containing credentials and other sensitive information, reportedly stolen during a supply chain attack involving the open-source proxy gateway LiteLLM, has surfaced. The data is linked to thousands of corporate domains, including major entities like AWS, Samsung, Cisco, and Salesforce.