CVE-2026-42271Vulnerability
BerriAI LiteLLM Command Injection Vulnerability
Reported by 4 independent sources · first reported by Recorded Future · last reported
Last reported 15 days ago
Fix due 22 Jun 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
5 reports, newest first · the exact sentence from each-
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules“CVE reference: CVE-2026-42271”
-
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers“In the sample Black Lotus Labs analyzed, the targeted LiteLLM endpoint (/mcp-rest/test/connection) is referenced in CVE-2026-42271, a command injection vulnerability in LiteLLM.”
-
The vulnerabilities AI finds are the ones attackers want“They include a command injection flaw in LiteLLM (CVE-2026-42271) that leads to host takeover and API credential theft, and two Langflow flaws (CVE-2026-5027 and CVE-2025-3248) that let attackers write files to the host or run code remotely.”
-
Vulnerability Discovery and Exploitation Trends in the AI Era“CVE-2026-42271 (BerriAI LiteLLM): Command injection in Model Context Protocol (MCP) server preview endpoints (POST /mcp-rest/test/connection), resulting in host takeover and API credential theft.”
-
June 2026 CVE Landscape“CVE-2026-42271”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-5027, CVE-2026-1731, CVE-2025-3248, CVE-2026-10520, CVE-2026-25089, CVE-2026-39808, CVE-2026-11645, CVE-2026-28318, CVE-2026-20230, CVE-2026-35616, CVE-2026-33825, CVE-2025-55182, CVE-2026-21509, CVE-2025-8088, CVE-2025-6218, CVE-2026-35273, CVE-2021-27137, CVE-2026-0770, CVE-2026-46817, CVE-2026-48907
Thanks — we review every report.