CVE-2026-108574Proof of concept (PoC) published · CISA
BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
CVSS score
5.3
EPSS probability
%0.2
Risk score
0.0
Published
2 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-42208 Actively exploited
SQL injection in Litellm
L
Patch verifiedEPSS %6
8.8
CVE-2026-59822 Actively exploited
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
B
Patch verifiedEPSS %1
8.7
CVE-2026-47101
LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
B
Patch verifiedEPSS %1
8.7
CVE-2026-47102
LiteLLM < 1.83.10 Privilege Escalation via User Update
B
Patch verifiedEPSS %1
8.7
CVE-2026-89032
BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
B
Patch verifiedEPSS %0
5.3
CVE-2026-59823
LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy
B
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-108574"