https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:52:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380519 EUVD-2026-380519 https://cve.radiocsirt.org/vuln/euvd-2026-380519 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89032 <p>BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants&#39; cached responses by exploiting a metadata key mismatch between _get_semantic_cache_tenant_scope() and _get_metadata_variable_name(). Attackers holding a valid virtual key can submit semantically similar prompts on affected routes such as /v1/responses and /bedrock/* to retrieve cached responses containing other tenants&#39; personally identifiable information, financial data, or source code, and can cause agentic front-ends to auto-execute attacker-supplied tool calls under victim credentials by returning cached function_call or tool_calls payloads to a different principal.</p> <p>BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants&#39; cached responses by exploiting a metadata key mismatch between _get_semantic_cache_tenant_scope() and _get_metadata_variable_name(). Attackers holding a valid virtual key can submit semantically similar prompts on affected routes such as /v1/responses and /bedrock/* to retrieve cached responses containing other tenants&#39; personally identifiable information, financial data, or source code, and can cause agentic front-ends to auto-execute attacker-supplied tool calls under victim credentials by returning cached function_call or tool_calls payloads to a different principal.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-89032 https://cve.radiocsirt.org/vuln/ghsa-237m-2qxv-ww7c <p>BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants&#39; cached responses by exploiting a metadata key mismatch between _get_semantic_cache_tenant_scope() and _get_metadata_variable_name(). Attackers holding a valid virtual key can submit semantically similar prompts on affected routes such as /v1/responses and /bedrock/* to retrieve cached responses containing other tenants&#39; personally identifiable information, financial data, or source code, and can cause agentic front-ends to auto-execute attacker-supplied tool calls under victim credentials by returning cached function_call or tool_calls payloads to a different principal.</p> <p>BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants&#39; cached responses by exploiting a metadata key mismatch between _get_semantic_cache_tenant_scope() and _get_metadata_variable_name(). Attackers holding a valid virtual key can submit semantically similar prompts on affected routes such as /v1/responses and /bedrock/* to retrieve cached responses containing other tenants&#39; personally identifiable information, financial data, or source code, and can cause agentic front-ends to auto-execute attacker-supplied tool calls under victim credentials by returning cached function_call or tool_calls payloads to a different principal.</p> https://cve.radiocsirt.org/vuln/ghsa-237m-2qxv-ww7c https://cve.radiocsirt.org/vuln/opensuse-su-2026:11927-1 <p>python313-litellm-1.103.0-1.1 on GA media</p> <p>python313-litellm-1.103.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11927-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3599 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in LiteLLM ausnutzen, um Sicherheitsvorkehrungen zu umgehen und so Informationen offenzulegen sowie unbefugte Aktionen durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in LiteLLM ausnutzen, um Sicherheitsvorkehrungen zu umgehen und so Informationen offenzulegen sowie unbefugte Aktionen durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3599