CVE-2026-84377

2 advisories.

PyPI/litellm CVE-2026-84377: medium 6.5, EPSS 0.54%

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Action: Upgrade litellm to 1.88.6 or later.

pip install litellm==1.88.6

pip install litellm==1.89.7

pip install litellm==1.90.7

pip install litellm==1.91.5

pip install litellm==1.92.2

pip install litellm==1.93.2

pip install litellm==1.94.3

pip install litellm==1.95.1

pip install litellm==1.96.2

Affected

introduced	fixed	last affected
0	1.88.6	-
1.89.0	1.89.7	-
1.90.0	1.90.7	-
1.91.0	1.91.5	-
1.92.0	1.92.2	-
1.93.0	1.93.2	-
1.94.0	1.94.3	-
1.95.0	1.95.1	-
1.96.0	1.96.2	-

Fixed versions

1.88.6

1.89.7

1.90.7

1.91.5

1.92.2

1.93.2

1.94.3

1.95.1

1.96.2

Sources

CVE-2026-84377 · published 2026-09-30T21:11:25Z · modified 2026-10-01T17:55:39.952052915Z · JSON

PyPI/litellm CVE-2026-84377: medium 6.5, EPSS 0.54%

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Action: Upgrade litellm to 1.88.6 or later.

pip install litellm==1.88.6

pip install litellm==1.89.7

pip install litellm==1.90.7

pip install litellm==1.91.5

pip install litellm==1.92.2

pip install litellm==1.93.2

pip install litellm==1.94.3

pip install litellm==1.95.1

pip install litellm==1.96.2

Affected

introduced	fixed	last affected
0	1.88.6	-
1.89.0	1.89.7	-
1.90.0	1.90.7	-
1.91.0	1.91.5	-
1.92.0	1.92.2	-
1.93.0	1.93.2	-
1.94.0	1.94.3	-
1.95.0	1.95.1	-
1.96.0	1.96.2	-

Fixed versions

1.88.6

1.89.7

1.90.7

1.91.5

1.92.2

1.93.2

1.94.3

1.95.1

1.96.2

Sources

CVE-2026-84377 · published 2026-10-01T16:38:41.476323Z · modified 2026-10-01T17:45:03.105462256Z · JSON