BerriAI

Security Risk Profile

/100

high

Security Risk Score

Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 20, 2025 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

6.9

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

72/100

high

⚠️ 3 Active Exploits

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

Command Injection

SQL Injection

OS Command Injection

Code Injection

Most Affected Products

1. LiteLLM LiteLLM17

2. BerriAI LiteLLM13

3. pip/litellm7

4. redhat OpenShift AI3

5. LiteLLM1

Recent Vulnerabilities

See more →

CVE-2026-59822

CVSS 8.8high

BerriAI LiteLLM Improper Authentication Vulnerability

Jul 8, 2026⚠ Exploited

CVE-2026-12772

CVSS 2.1low

BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration

Jun 21, 2026🔧 No Patch

CVE-2026-12770

CVSS 2.1low

BerriAI litellm Admin Key key_management_endpoints.py improper authorization

Jun 21, 2026

CVE-2026-42271

CVSS 8.7high

BerriAI LiteLLM Command Injection Vulnerability

May 8, 2026⚠ Exploited🔧 No Patch

CVE-2026-42208

CVSS 9.3critical

BerriAI LiteLLM SQL Injection Vulnerability

Apr 29, 2026⚠ Exploited🔧 No Patch

https://seclists.org/oss-sec/2026/q2/54

unknown

X41 Advisory X41-2026-001: Guardrail Sandbox Escape in LiteLLM

Apr 8, 2026🔧 No Patch

CVE-2025-45809

CVSS 5.4medium

Jul 3, 2025🔧 No Patch

CVE-2024-6825

CVSS 8.8high

Remote Code Execution in BerriAI/litellm

Mar 20, 2025🔧 No Patch

CVE-2024-10188

CVSS 7.5high

Denial of Service in BerriAI/litellm

Mar 20, 2025

CVE-2025-0628

CVSS 8.1high

Improper Authorization in BerriAI/litellm