CERT24LiteLLM vulnerability CVE-2026-42271 enables command injection and can chain with a Starlette flaw to achieve unauthenticated remote code executionLoading data…
CERT24Threat Observatory
Period

LiteLLM vulnerability CVE-2026-42271 enables command injection and can chain with a Starlette flaw to achieve unauthenticated remote code execution

CISA added CVE-2026-42271 to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The LiteLLM command injection vulnerability allows an authenticated user to execute arbitrary commands on the host. Chained with Starlette vulnerability CVE-2026-48710, it can result in complete authentication bypass and unauthenticated remote code execution.

← Back to intelligence

LiteLLM vulnerability CVE-2026-42271 enables command injection and can chain with a Starlette flaw to achieve unauthenticated remote code execution

CISA added CVE-2026-42271 to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The LiteLLM command injection vulnerability allows an authenticated user to execute arbitrary commands on the host. Chained with Starlette vulnerability CVE-2026-48710, it can result in complete authentication bypass and unauthenticated remote code execution.