LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-09 06:26 UTC
Importiert: 2026-06-16 06:11 UTC
CVSS: 8.7
Quelle-ID: thn_global
uid_hash: 490e81373305aa6bc138620c364be37d977e4dce40c03f1f93cb4b26ee10f839

The Hacker News

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The vulnerability, tracked as CVE-2026-42271 (CVSS score: 8.7), is a command injection vulnerability that could allow any authenticated user to run arbitrary commands on the

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-42271	HIGH	8.7	HIGH	8.7			2026-05-08

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste