# LiteLLM security incidents · pwn.watch

> Security incidents tagged LiteLLM (vendor, product, platform or attack type).

Page: https://pwn.watch/t/litellm · generated 2026-10-22T16:42:00.965Z

## Status (as of 2026-10-22)
- Incidents: 4 (1 live, 0 live and not fully patched, 4 patched)
- Days without a LiteLLM security incident: 1
- Newest incident started: 2026-10-21

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/litellm.json
- RSS (every update): https://pwn.watch/t/litellm/feed.xml
- This file: https://pwn.watch/t/litellm/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [LiteLLM 1.107.0 PyPI/Docker supply-chain compromise](https://pwn.watch/i/litellm-1-107-0-pypi-compromise) ([json](https://pwn.watch/i/litellm-1-107-0-pypi-compromise.json)): critical, live, patched, started 2026-10-21, MAL-2026-2144
- [BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-59822) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-59822.json)): high, closed, patched, started 2026-09-02, CVE-2026-59822
- [BerriAI LiteLLM: BerriAI LiteLLM Command Injection Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-42271) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-42271.json)): high, closed, patched, started 2026-06-08, CVE-2026-42271, CVE-2026-48710
- [BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-42208) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-42208.json)): high, closed, patched, started 2026-05-08, CVE-2026-42208