CLEANSTART-2026-WD98251: Security fix for CVE-2026-112907 applied in: litellm-database 1.104.8-r0
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/litellm-databaseto a version that resolves this vulnerability.Fixed in 1.104.8-r0 - Upgrade
Upgrade
litellm-databaseto a version that resolves this vulnerability.Fixed in 1.104.8-r0
Event History
Frequently Asked Questions
What access would an attacker need to exploit this issue?
The severity vector indicates that an attacker needs local access and low-level privileges. Exploitation also has high attack complexity and does not require user interaction.
What is the expected impact if exploitation succeeds?
The reported impact is limited to availability. Confidentiality and integrity are not affected, while availability impact is rated low.
Which package release contains the security fix?
The fix is applied in cleanstart/litellm-database version 1.104.8-r0. The issue is resolved in later releases as well.