CISA has added CVE-2026-42271, a high-severity command injection vulnerability in BerriAI LiteLLM, to its Known Exploited Vulnerabilities catalog due to active exploitation. The flaw, with a CVSS score of 8.7, allows authenticated users to execute arbitrary commands and can be chained to achieve unauthenticated remote code execution (RCE).
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-42271 (CVSS score: 8.7), is a command injection vulnerability that could allow any authenticated user to run arbitrary commands on the
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
