CVE-2026-42271

Vendor

BerriAI

Product

LiteLLM

EPSS

0.93 (p100)

CISA KEV

listed

Exposure class

AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 50
   KEV CISA KEV 8 Jun 2026

   BerriAI LiteLLM Command Injection Vulnerability

   BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.

   KEV Fix available CVE-2026-42271 BerriAI
2. 56
   Threat intelligence Google TIG 30 Sep 2026

   Vulnerability Discovery and Exploitation Trends in the AI Era

   Written by: Robin Grunewald, Supriya Mazumdar, Kelli Vanderlee Introduction Google Threat Intelligence Group (GTIG) examines vulnerability disclosure and exploitation statistics to evaluate the impact of artificial intelligence…

   Exploited EPSS 0.93 CVE-2026-1731CVE-2026-42271CVE-2026-5027+1 more Google