BerriAI

Security Risk Profile

/100

high

Security Risk Score

Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 20, 2025 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

6.8

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

75/100

high

⚠️ 2 Active Exploits

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

Command Injection

SQL Injection

OS Command Injection

Code Injection

Most Affected Products

1. LiteLLM LiteLLM16

2. BerriAI LiteLLM12

3. pip/litellm6

4. redhat OpenShift AI3

Recent Vulnerabilities

See more →

CVE-2026-12772

CVSS 2.1low

BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration

6/21/2026🔧 No Patch

CVE-2026-12770

CVSS 2.1low

BerriAI litellm Admin Key key_management_endpoints.py improper authorization

6/21/2026

CVE-2026-42271

CVSS 8.7high

BerriAI LiteLLM Command Injection Vulnerability

5/8/2026⚠ Exploited🔧 No Patch

CVE-2026-42208

CVSS 9.3critical

BerriAI LiteLLM SQL Injection Vulnerability

4/29/2026⚠ Exploited🔧 No Patch

https://seclists.org/oss-sec/2026/q2/54

unknown

X41 Advisory X41-2026-001: Guardrail Sandbox Escape in LiteLLM

Remote Code Execution in BerriAI/litellm

3/20/2025🔧 No Patch

CVE-2024-10188

CVSS 7.5high

Denial of Service in BerriAI/litellm

3/20/2025

CVE-2025-0628

CVSS 8.1high

Improper Authorization in BerriAI/litellm

3/20/2025

CVE-2025-0330