Exploit / PoCcriticalExploited in the wild

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

The Hacker Newsby @TheHackersNewsJun 9, 2026 · 08:53 UTC (Jun 9, 2026)2 min read4 · 1 read

Read at thehackernews.com

Analyze CVE-2026-42271 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-42271 CVE-2026-48710 CVE-2026-42208

Tags: cve-2026-42208 cve-2026-42271 cve-2026-48710 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-42208 +1 related CVE CVE-2026-42271	SQL Injection in BerriAI LiteLLM Proxy Exploited in the Wild	9.3 group max	89%	KEVPoC	May 8, 2026 KEV May 8, 2026
CVE-2026-48710	HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)	6.5	70%	KEVPoC ×3	May 26, 2026 KEV Sep 2, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jun 09, 2026 Vulnerability / Artificial Intelligence The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.