Disclosure summary
BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.
CISA remediation guidance
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Splunk Security Advisories · SPLUNK-SVD-2026-0701
Open original source · Updated Oct 06, 2026
Third-Party Package Updates in Python for Scientific Computing - July 2026
Vendor advisory association; do not assume every product in a grouped advisory is affected by each CVE.
Original records & references
PUBLISHED 2026-06-08T00:00:00-04:00
MODIFIED 2026-06-08T00:00:00-04:00
INGESTED 2026-10-06T11:42:57-04:00