Vulnerability
CVE-2026-42271 — BerriAI LiteLLM Command Injection Vulnerability
Exploited in the wild 1 story · 1 outlet
Impacted if
BerriAI LiteLLM
CISA Known Exploited Vulnerabilities
Added on 2026-06-08, federal remediation due 2026-06-22. BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Coverage
-
Cryptomining malware used poetry to infect more than 3,400 servers, researchers say
Tom's Hardware
Semiconductors
Over 3,400 “victim servers” were hit by cryptomining malware PoeLLM during a campaign named Canto Incognito, tracked since April 2026, Lumen’s cybersecurity research team Black Lotus Labs reports . The malware’s “command-and-control (C2)…