HIGHVulnerability
Verified
Global

CISA KEV: BerriAI LiteLLM — BerriAI LiteLLM Command Injection Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.

Analysis

BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host. Added to CISA Known Exploited Vulnerabilities catalog on 2026-06-08. Remediation due: 2026-06-22.

Indicators of Compromise (1)

CVE (1)
CVE-2026-42271
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jun 8, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

On-chain trading app fomo raises $75m

On-chain trading platform fomo has raised $75 million in a Series B led by Index Ventures with participation from Union Square Ventures and Benchmark.

Finextra
MEDIUMVulnerability

Austrian banks embrace Wero

Austria's biggest banking groups have joined the European Payments Initiative, extending the reach of the account-to-account Wero wallet across the continent.

Finextra
MEDIUMVulnerability

Trump Executive Order Accelerates Post-Quantum Security Push

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/trump-executive-order-accelerates-post-quantum-security-push-image_small-9-a-32044.jpg" align=right hspace=4><b>Orders Reflect Growing Concern Over Future Cryptographic Attacks</b><br>U.S. President Trump signed executive orders accelerating the federal transition to post-quantum cryptography by 2030 while expanding US investment,

Bank Info Security