Executive Summary
CISA added exploited LiteLLM command injection CVE-2026-42271 (CVSS 8.7) to KEV; it chains to unauthenticated RCE.
What Happened
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-42271 (CVSS score: 8.7), is a command injection vulnerability that could allow any authenticated user to run arbitrary commands on the
Affected Products
- LiteLLM
Vulnerability / Attack Technique
Command injection in an AI gateway
Technical Mechanism
Authenticated users can run commands; chains to unauthenticated RCE.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
AI gateways hold many provider keys. RealGround analysis: patch and rotate keys.
Recommended Controls
- Update LiteLLM
- Rotate provider keys
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/06/litellm-flaw-cve-2026-42271-exploited.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.