Skip to content
Threat Feed
Subscribe

Vendor

LiteLLM

5 briefs RSS
high advisory

LiteLLM Vulnerability Allows Remote Code Execution with Service Privileges

A remote, authenticated attacker can exploit a vulnerability in LiteLLM to execute arbitrary program code with the privileges of the service.

LiteLLM remote-code-execution rce vulnerability llm-security bsi
2t
high advisory

LiteLLM Multiple Vulnerabilities Allow Privilege Escalation

A remote, authenticated attacker can exploit multiple vulnerabilities in LiteLLM to escalate their privileges.

LiteLLM privilege-escalation vulnerability
2r 1t
medium advisory

LiteLLM SQL Injection Vulnerability (CVE-2025-45809)

A SQL Injection vulnerability (CVE-2025-45809) in LiteLLM versions prior to 1.81.0 allows unauthenticated attackers to potentially steal database contents and read server files via time-based blind SQL injection in the `/key/block` and `/key/unblock` endpoints.

LiteLLM sqli sql-injection CVE-2025-45809
2r 1t 1i
critical threat

LiteLLM Multiple Vulnerabilities

Multiple vulnerabilities in LiteLLM could allow an attacker to perform a SQL injection attack and gain unauthorized access or execute arbitrary code with the privileges of the service.

LiteLLM sql-injection vulnerability privilege-escalation
2r 2t
high threat

TeamPCP Targets LiteLLM Package on PyPI

TeamPCP, the threat actor behind previous compromises of Trivy and KICS, has now targeted LiteLLM, a popular Python package on PyPI with 95 million monthly downloads.

LiteLLM TeamPCP supply-chain pypi
2r 3t