high8.8Known exploited
CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-06-08. Federal due date: 2026-06-22.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | litellm | >= 1.74.2, < 1.83.7 | 1.83.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Litellm | Litellm | from 1.74.2 before 1.83.7 |
| Redhat | Openshift Ai | from 2.25 before 2.25.8 from 3.3 before 3.3.4 Version 3.4 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- CISA KEV catalog
- https://github.com/advisories/GHSA-v4p8-mg3p-g94g
- https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g
- https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable
- https://nvd.nist.gov/vuln/detail/CVE-2026-42271
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42271
- https://access.redhat.com/errata/RHSA-2026:27784
- https://access.redhat.com/errata/RHSA-2026:28960
- https://access.redhat.com/errata/RHSA-2026:30056
- https://access.redhat.com/security/cve/CVE-2026-42271
- https://bugzilla.redhat.com/show_bug.cgi?id=2467924
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42271.json